Lucene search
+L

1206 matches found

Mend
Mend
•added 2019/05/23 4:54 a.m.•2 views

CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS0.02094EPSS
SaveExploits1References13
CNVD
CNVD
•added 2019/05/23 12:00 a.m.•15 views

Poppler heap buffer overread vulnerability (CNVD-2019-15934)

Poppler is based on xpdf-3.0 code base PDF rendering library. A heap buffer over-read vulnerability exists in JPXStream::init in JPEG2000Stream.cc in Poppler 0.76.1 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via data with inconsistent height or...

8.8CVSS8.6AI score0.02094EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2019/05/23 12:00 a.m.•11 views

PT-2019-2634 · Poppler +4 · Poppler +4

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 0.76.1 Description: The issue is related to a heap-based buffer over-read in the JPXStream::init function, located in JPEG2000Stream.cc, which can be triggered by data with inconsistent heights or widths. This can...

9.8CVSS7.3AI score0.03518EPSS
SaveExploits22References159
OSV
OSV
•added 2019/05/23 12:00 a.m.•11 views

UBUNTU-CVE-2019-12293

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths...

8.8CVSS7.5AI score0.02094EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2019/05/15 12:00 a.m.•33 views

Adobe Acrobat Pro DC ImageConversion JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.08798EPSS
SaveExploits0References1
Prion
Prion
•added 2019/04/25 5:29 p.m.•25 views

Heap overflow

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

6.8CVSS8AI score0.01228EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2019/04/25 5:29 p.m.•23 views

CVE-2019-9136

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS8AI score0.01228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/04/25 4:57 p.m.•32 views

CVE-2019-9136

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS8AI score0.01228EPSS
SaveExploits0References1
CVE
CVE
•added 2019/04/25 4:57 p.m.•60 views

CVE-2019-9136

CVE-2019-9136 concerns DaviewIndy 8.98.7 and earlier, where a heap-based overflow in the JPEG2000 file handling by Daview.exe can be triggered by opening a malformed JPEG2000 file, enabling arbitrary code execution per the description. Affected component appears to be the JPEG2000 decoder/loader ...

7.8CVSS8AI score0.01228EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/04/25 12:00 a.m.•5 views

PT-2019-19380

Name of the Vulnerable Software and Affected Versions DaviewIndy versions 8.98.7 and earlier Description The issue is triggered when a user opens a malformed JPEG2000 format file, which is mishandled by Daview.exe, leading to a Heap-based overflow. This could allow attackers to exploit the issue...

7.8CVSS0.01228EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/25 12:00 a.m.•5 views

CVE-2019-9136: Heap-based Buffer Overflow

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

7.8CVSS6.2AI score0.01228EPSS
SaveExploits0References3
Veracode
Veracode
•added 2019/01/15 8:57 a.m.•32 views

Denial Of Service (DoS)

openjpeg is vulnerable to denial of service DoS attacks. The vulnerability exists through a heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file...

6.8CVSS7.2AI score0.0615EPSS
SaveExploits1References17Affected Software1
Positive Technologies
Positive Technologies
•added 2018/12/03 12:00 a.m.•2 views

PT-2018-19329

Уязвимость утилиты конвертирования JPEG2000 файлов jasper связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

2.1CVSS5.8AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/11/20 12:00 a.m.•30 views

Adobe Photoshop JPEG2000 Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.5CVSS0.8AI score0.07879EPSS
SaveExploits0References1
Veracode
Veracode
•added 2018/11/01 6:41 a.m.•37 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. This is due to an arithmetic operation overflow in the JPEG2000 parser causing an out-of-bounds read and results in a denial of service condition...

5.5CVSS5.5AI score0.01119EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2018/09/27 12:00 a.m.•45 views

Adobe Acrobat Pro DC ImageConversion JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS2.7AI score0.36228EPSS
SaveExploits1References1
Prion
Prion
•added 2018/08/01 6:29 a.m.•24 views

Heap overflow

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

5.8CVSS6.5AI score0.02532EPSS
SaveExploits1References7Affected Software7
OSV
OSV
•added 2018/08/01 6:29 a.m.•9 views

UBUNTU-CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

8.1CVSS6.9AI score0.02532EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2018/08/01 6:29 a.m.•40 views

CVE-2016-9573

An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2ktoimage tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap...

8.1CVSS6.8AI score0.02532EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
•added 2018/07/16 12:00 a.m.•25 views

Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC and Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

6.5CVSS2.5AI score0.0832EPSS
SaveExploits0References1
Rows per page
Query Builder