nis2pyr (0.6.2), root-painter-trainer (0.2.27.1) +1 more potentially affected by unknown CVE via imagecodecs (2021.8.26)

imagecodecs PYPI version 2021.8.26 is affected by a known vulnerability. The following packages have a transitive dependency on imagecodecs and may be impacted: - nis2pyr 0.6.2 - root-painter-trainer 0.2.27.1 - zarr-jpeg2k =0.1.0rc2, =0.1.0rc3 Source cves: unknown CVE Source advisory:...

nis2pyr (0.6.2), root-painter-trainer (0.2.27.1) +1 more potentially affected by CVE-2023-4863 +1 more via imagecodecs (2021.8.26)

imagecodecs PYPI version 2021.8.26 is affected by a known vulnerability. The following packages have a transitive dependency on imagecodecs and may be impacted: - nis2pyr 0.6.2 - root-painter-trainer 0.2.27.1 - zarr-jpeg2k =0.1.0rc2, =0.1.0rc3 Source cves: CVE-2023-4863, CVE-2023-5129 Source...

SUSE CVE-2014-3598

The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image...

PT-2021-20453

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the JPEG2K Loader.dll library, which lacks proper validation of user-supplied data when parsing J2K files. This...

Denial Of Service (DoS)

pillow is vulnerable to denial of service. An attacker can send a malicious Jpeg2K image with multiple bands to cause an out-of-bounds read in the J2kDecode function in j2kugrayi...

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2021-1273)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trust...

Pillow Jpeg2KImagePlugin Plugin Denial of Service Vulnerability

Python Image Library PIL is a Python image processing library developed by Swiss software developer Fredrik Lundh. Pillow is a compiled version of PIL with some bug fixes developed by American software developer Alex Clark, and Jpeg2KImage is one of the image processing plugins. Jpeg2KImage is on...

PT-2015-3727

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 2.5.3 Description The issue allows remote attackers to cause a denial of service via a crafted image, specifically affecting the Jpeg2KImagePlugin plugin. Recommendations For versions prior to 2.5.3, update to version...

ZDI-12-135 : Apple QuickTime JPEG2k Sample Size Atom Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-135 : Apple QuickTime JPEG2k Sample Size Atom Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-135 August 3, 2012 - -- CVE ID: CVE-2012-0661 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

Apple QuickTime JPEG2k Sample Size Atom Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Apple...

Gentoo Security Advisory GLSA 200812-18 (jasper)

The remote host is missing updates announced in advisory GLSA 200812-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200812-18 (jasper)

The remote host is missing updates announced in advisory GLSA 200812-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ GLSA 200812-18 ] JasPer: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200812-18 : JasPer: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-18 JasPer: User-assisted execution of arbitrary code Marc Espie and Christian Weisgerber have discovered multiple vulnerabilities in JasPer: Multiple integer overflows might allow for insufficient memory allocation, leading...

Security fix for the ALT Linux 5 package netpbm version 10.35.30-alt1

Aug. 20, 2007 Alexey Tourbin 10.35.30-alt1 - 10.33 - 10.35.30 from netpbm.svn.sourceforge.net repo + fixes buffer overflow in pamtofits CVE-2006-3145 - sync RedHat patches Jindrich Novy, 10.35-14 + pamscale won't waste all system resources by usage of uninitialized variables for output image...