CVE-2013-3941

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...

Heap overflow

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...

CVE-2013-3941

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...

CVE-2013-3941

CVE-2013-3941 affects XnView before 2.13. The vulnerability is in Xjp2.dll (JPEG2000 handling): (1) Csiz parameter in a SIZ marker triggers incorrect memory allocation, and (2) lqcd field in a QCD marker causes a heap-based buffer overflow. This can enable remote code execution. Remediation: upgr...

PT-2020-7471

Name of the Vulnerable Software and Affected Versions: XnView versions prior to 2.13 Description: The issue allows remote attackers to execute arbitrary code via two methods: 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker i...

CVE-2013-3941: Out-of-bounds Write

Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via 1 the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or 2 the lqcd field in a QCD marker in a crafted JPEG2000 file, which leads to a heap-based buffer overflow...

CVE-2019-5154

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K...

CVE-2019-5154

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K...

Heap overflow

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K...

LEAD Technologies LEADTOOLS Buffer Overflow Vulnerability (CNVD-2020-01951)

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. A buffer overflow vulnerability exists in the JPEG2000 parsing functionality in LEAD Technologies LEADTOOLS version 20.0.2019.3.15, which originates when a networked system or product performs an operation ...

CVE-2019-5154

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K...

CVE-2019-5154

LEADTOOLS 20.0.2019.3.15 contains a heap overflow in the JPEG2000 parsing path. A specially crafted J2K image can trigger an out-of-bounds write of a null byte in a heap buffer, potentially leading to code execution. This vulnerability (CVE-2019-5154) has been detailed by Talos (TALOS-2019-0945) ...

PT-2019-17503

Name of the Vulnerable Software and Affected Versions LEADTOOLS version 20.0.2019.3.15 Description A heap overflow vulnerability exists in the JPEG2000 parsing functionality. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting...

CVE-2019-5154: Heap-based Buffer Overflow

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K...

LEADTOOLS JPEG2000 Isot parsing Memory Corruption Vulnerability

Summary An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20.0.2019.3.15. A specially crafted J2K image file can cause an out of bounds write of a null byte in a heap buffer, potentially resulting in code execution. An attack can specially craft ...

CVE-2019-5125

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this...

CVE-2019-5125

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this...

Heap overflow

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this...

CVE-2019-5125

An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this...

CVE-2019-5125

The CVE-2019-5125 issue affects LEADTOOLS 20 JPEG2000 parsing (j2pc). A specially crafted J2K image can trigger a heap out-of-bounds write in the image allocation/processing path, potentially enabling code execution. Public vulnerability coverage (Talos advisory TALOS-2019-0916) confirms the impa...