Lucene search
+L

999 matches found

OSV
OSV
added 2019/05/23 5:29 a.m.4 views

DEBIAN-CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS7.2AI score0.02094EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/05/23 4:54 a.m.28 views

CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

7AI score0.02094EPSS
SaveExploits1References8
CNVD
CNVD
added 2019/05/23 12:0 a.m.11 views

Poppler heap buffer overread vulnerability (CNVD-2019-15934)

Poppler is based on xpdf-3.0 code base PDF rendering library. A heap buffer over-read vulnerability exists in JPXStream::init in JPEG2000Stream.cc in Poppler 0.76.1 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via data with inconsistent height or...

8.8CVSS8.6AI score0.02094EPSS
SaveExploits1References1
OSV
OSV
added 2019/05/23 12:0 a.m.7 views

UBUNTU-CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS7.5AI score0.02094EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2019/05/23 12:0 a.m.5 views

PT-2019-2634 · Poppler +4 · Poppler +4

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 0.76.1 Description: The issue is related to a heap-based buffer over-read in the JPXStream::init function, located in JPEG2000Stream.cc, which can be triggered by data with inconsistent heights or widths. This can...

9.8CVSS7.2AI score0.03518EPSS
SaveExploits22References159
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.32 views

Adobe Acrobat Pro DC ImageConversion JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.08798EPSS
SaveExploits0References1
NVD
NVD
added 2019/04/25 5:29 p.m.18 views

CVE-2019-9136

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS8AI score0.01228EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/25 5:29 p.m.19 views

Heap overflow

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

6.8CVSS8AI score0.01228EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/04/25 4:57 p.m.25 views

CVE-2019-9136

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS8AI score0.01228EPSS
SaveExploits0References1
CVE
CVE
added 2019/04/25 4:57 p.m.49 views

CVE-2019-9136

CVE-2019-9136 concerns DaviewIndy 8.98.7 and earlier, where a heap-based overflow in the JPEG2000 file handling by Daview.exe can be triggered by opening a malformed JPEG2000 file, enabling arbitrary code execution per the description. Affected component appears to be the JPEG2000 decoder/loader ...

7.8CVSS8AI score0.01228EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2019/01/15 8:57 a.m.28 views

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

6.8CVSS7.2AI score0.0615EPSS
SaveExploits1References17Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2018/11/20 12:0 a.m.26 views

Adobe Photoshop JPEG2000 Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS0.8AI score0.07879EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/11/01 6:41 a.m.33 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. This is due to an arithmetic operation overflow in the JPEG2000 parser causing an out-of-bounds read and results in a denial of service condition...

5.5CVSS5.5AI score0.01119EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2018/09/27 12:0 a.m.41 views

Adobe Acrobat Pro DC ImageConversion JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.7AI score0.36614EPSS
SaveExploits1References1
OSV
OSV
added 2018/08/01 6:29 a.m.5 views

UBUNTU-CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

8.1CVSS6.9AI score0.02565EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2018/08/01 6:29 a.m.33 views

CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

8.1CVSS6.8AI score0.02565EPSS
SaveExploits1References4
Prion
Prion
added 2018/08/01 6:29 a.m.22 views

Heap overflow

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

5.8CVSS6.5AI score0.02565EPSS
SaveExploits1References7Affected Software7
Zero Day Initiative
Zero Day Initiative
added 2018/07/16 12:0 a.m.22 views

Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC and Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

2.6CVSS2.5AI score0.08425EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/06/26 12:0 a.m.30 views

Adobe Photoshop JPEG2000 Image Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS3.2AI score0.08106EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/17 3:29 p.m.10 views

CVE-2018-9963

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.5CVSS5AI score0.02504EPSS
SaveExploits0References2
Rows per page
Query Builder