PT-2015-7711

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted file, including U3D, LWO, JPEG2000, or FBX files. This is due to "Out-Of-Bounds Indexing"...

FreeBSD : jasper -- multiple vulnerabilities (f1692469-45ce-11e5-adde-14dae9d210b8)

Martin Prpic reports : A double free flaw was found in the way JasPer's jasperimagestopload function parsed certain JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash. Feist Josselin reports : A new use-after-free was found in Jasper JPEG-200. The...

Heap overflow

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...

UBUNTU-CVE-2015-1273

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...

CVE-2015-1273

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document...

PT-2015-1674

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to r3002 PDFium in Google Chrome versions prior to 44.0.2403.89 Description The issue is caused by a heap-based buffer overflow in the j2k.c file of OpenJPEG, which is used in PDFium. This allows remote attackers to cau...

VMware JPEG2000 Stack Overflow (CVE-2015-2336)

A stack overflow vulnerability has been reported in multiple VMWare products, including VMware Workstation, Player, and Fusion, when processing JPEG2000 JPX files. A remote attacker can exploit this vulnerability to cause a denial of service condition or code execution on the host system...

VMware Player 7.x < 7.1.1 Multiple Vulnerabilities (VMSA-2015-0004)

The version of VMware Player installed on the remote Windows host is 7.x prior to 7.1.1. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer overflow condition in the JPEG2000 plugin that is triggered when parsing...

VMware Player 6.x < 6.0.6 Multiple Vulnerabilities (VMSA-2015-0004)

The version of VMware Player installed on the remote Windows host is 6.x prior to 6.0.6. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer overflow condition in the JPEG2000 plugin that is triggered when parsing...

VMware Workstation 10.x < 10.0.6 / 11.x < 11.1.1 Multiple Vulnerabilities (VMSA-2015-0004) (Windows)

The version of VMware Workstation installed on the remote Windows host is 10.x prior to 10.0.6 or 11.x prior to 11.1.1. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer overflow condition in the JPEG2000 plugin...

VMware Horizon View Client 3.2.x < 3.2.1 / 3.3.x < 3.4.0 / or 5.x < 5.4.2 Multiple Vulnerabilities (VMSA-2015-0004)

The version of VMware Horizon View Client installed on the remote host is 3.2.x prior to 3.2.1, 3.3.x prior to 3.4.0, or 5.x with local mode prior to 5.4.2. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists due to a stack-based buffer...

PYSEC-2015-15

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image...

Adobe Reader JPEG2000 Region of Interest Memory Corruption (APSB10-02) - Ver2 (CVE-2009-3955)

Portable Document Format PDF is an open file format created by Adobe Systems. A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to the way Adobe Reader and Acrobat parse a PDF file containing a malformed Jp2c stream of a JpxDecode encoded da...

Oracle Solaris Third-Party Patch Update : ghostscript (multiple_denial_of_service_vulnerabilities7)

The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the jpccoxgetcompparms function in libjasper/ jpc/jpccs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

jasper: arbitrary code execution

CVE-2014-8137 arbitrary code execution A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. - CVE-2014-9029 arbitrary code execution...

IrfanView 4.27 - JP2000.dll plugin DoS

No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: IrfanView 4.27 DoS, Integer division by zero in module JPEG2000.dll iview32.exe MD5: 58150C1AC5B86C1A6B5E15FE1C3A870D...

Oracle Outside-In JP2 File Parsing Heap Overflow

No description provided by source. Application: Oracle Outside-In JP2 File Parsing Heap Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-24 Author: Francis Provencher Protek Research Lab's Website...

IrfanView 4.28 Multiple Denial of Service Vulnerabilities

No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.01.06 published: 2011.01.08 tested on: Windows XP SP3 Home Edition Windows XP SP3 Professional App: IrfanView 4.28 DoS, Integer division by zero. Unhandled exception in module JPEG2000.dll...

Irfanview JPEG2000 <= 4.3.2.0 - jp2 Stack Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...

openSUSE Security Update : openjpeg (openSUSE-SU-2012:1370-1)

This update fixes a heap-based buffer overflow in OpenJPEG which could allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...