Lucene search
+L

999 matches found

Zero Day Initiative
Zero Day Initiative
added 2017/09/15 12:0 a.m.38 views

Microsoft Windows PDF Library JPEG2000 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS8.3AI score0.21531EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/09/12 12:0 a.m.39 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS7.4AI score0.21531EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/30 9:29 a.m.5 views

UBUNTU-CVE-2016-10506

Division-by-zero vulnerabilities in the functions opjpinextcprl, opjpinextpcrl, and opjpinextrpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service application crash via crafted j2k files...

6.5CVSS7AI score0.0347EPSS
SaveExploits0References10
CNVD
CNVD
added 2017/08/30 12:0 a.m.7 views

OpenJPEG Denial of Service Vulnerability (CNVD-2017-27280)

OpenJPEG is a C-based open source JPEG 2000 codec . A denial of service vulnerability exists in the opjdecompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted J2K...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2017/08/21 12:0 a.m.6 views

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2017-28760)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An arbitrary code execution vulnerability exists in Foxit Reader. A remote attacker can exploit this vulnerability by creating a specially crafted JPEG2000 file to execute arbitrary code on the target system...

8.8CVSS9.1AI score0.03968EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/08/21 12:0 a.m.7 views

Foxit Reader Arbitrary Code Execution Vulnerability (CNVD-2017-28759)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An arbitrary code execution vulnerability exists in Foxit Reader. A remote attacker can exploit this vulnerability by creating a specially crafted JPEG2000 file to execute arbitrary code on the target system...

8.8CVSS9.1AI score0.07152EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:0 a.m.29 views

Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Digital Editions. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

4.3CVSS1.5AI score0.08078EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:0 a.m.33 views

Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.8CVSS4.3AI score0.06918EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:0 a.m.32 views

Adobe Acrobat Pro DC JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

6.8CVSS5.1AI score0.07069EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:0 a.m.27 views

Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

4.3CVSS2.2AI score0.10067EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/08/08 12:0 a.m.40 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS5.5AI score0.14416EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/23 3:29 a.m.5 views

UBUNTU-CVE-2017-11536

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image function in coders/jp2.c...

6.5CVSS6.8AI score0.01227EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/07/13 12:0 a.m.34 views

Virtuozzo 6 : openjpeg / openjpeg-devel / openjpeg-libs (VZLSA-2017-0559)

An update for openjpeg is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

8.8CVSS7.5AI score0.07114EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2017/07/13 12:0 a.m.32 views

Virtuozzo 7 : openjpeg / openjpeg-devel / openjpeg-libs (VZLSA-2017-0838)

An update for openjpeg is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

8.8CVSS7.3AI score0.07114EPSS
SaveExploits2References8
Zero Day Initiative
Zero Day Initiative
added 2017/07/11 12:0 a.m.53 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS3.1AI score0.20498EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/07/11 12:0 a.m.39 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS5.5AI score0.20498EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/07/11 12:0 a.m.36 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS5.8AI score0.20498EPSS
SaveExploits0References1
Talos Blog
Talos Blog
added 2017/07/07 8:27 a.m.124 views

Vulnerability Spotlight: TALOS-2017-0311,0319,0321 - Multiple Remote Code Execution Vulnerability in Poppler PDF library

Vulnerability discovered by Marcin Noga, Lilith Wyatt and Aleksandar Nikolic of Cisco Talos.OverviewTalos has discovered multiple vulnerabilities in the freedesktop.org Poppler PDF library. Exploiting these vulnerabilities can allow an attacker to gain full control over the victim's machine. If a...

7.5CVSS0.8AI score0.05521EPSS
SaveExploits5
CNVD
CNVD
added 2017/07/04 12:0 a.m.7 views

Pillow 'j2k_encode_entry' function heap buffer overflow vulnerability

Pillow is a compiled version of PIL Python Image Processing Library with some bug fixes developed by American software developer Alex Clark. A heap buffer overflow vulnerability exists in the 'j2kencodeentry' function in Pillow versions 2.5.0 through 3.1.1. A remote attacker can exploit this...

5.5CVSS7.2AI score0.02583EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/13 12:0 a.m.82 views

Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows PDF Library. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

6.8CVSS5.5AI score0.24243EPSS
SaveExploits0References1
Rows per page
Query Builder