7155 matches found
Buffer overflow
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...
CVE-2020-7374
CVE-2020-7374 affects Documalis Free PDF Editor 5.7.2.26 and Documalis Free PDF Scanner 5.7.2.122, which fail to validate JPEG contents in PDFs, enabling a stack-based buffer overflow that can lead to remote code execution as the user running the software. Public exploit visibility is noted (Meta...
CVE-2020-7374 Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...
PT-2020-19580
Name of the Vulnerable Software and Affected Versions Documalis Free PDF Editor version 5.7.2.26 Documalis Free PDF Scanner version 5.7.2.122 Description The issue arises from the improper validation of JPEG images within PDFs, which can be exploited to trigger a buffer overflow on the stack. Thi...
CVE-2020-7374: Buffer Copy without Checking Size of Input
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...
gThumb: Arbitrary code execution
Background gThumb is an image viewer and browser for GNOME. Description A heap-based buffer overflow in gThumb’s cairoimagesurfacecreatefromjpeg function, located in extensions/cairoio/cairo-image-surface-jpeg.c was discovered. Impact A remote attacker could entice a user to open a specially...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists in non-standard configurations, where a JPEG image created by JavaScript could have caused an internal variable to overflow...
Documalis Free PDF Editor 5.7.2.26 / Documalis Free PDF Scanner 5.7.2.122 Buffer Overflow Exploit
Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...
PT-2020-21876
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the load jpeg image function, which calls stbi jpeg load and then stbi load main...
PT-2020-21887
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: stbi jpeg huff decode, stbi jpeg...
PT-2020-21850
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the function names stbi build huffman, stbi process marker,...
PT-2020-21854
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the stbi jpeg decode block prog ac function, which is...
PT-2020-21875
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type being a Heap-buffer-overflow READ 8, and the crash stat...
SUSE-SU-2020:2057-1 Security update for python-Pillow
This update for python-Pillow fixes the following issues: - Add 0019-FLI-overflow-error-fix-and-testcase.patch Fixes CVE-2016-0775, bsc965582 - Add 0020-Fix-OOB-reads-in-FLI-decoding.patch Fixes CVE-2020-10177, bsc1173413 - Add 0021-Fix-bounds-overflow-in-JPEG-2000-decoding.patch Fixes...
Uncontrolled resource consumption in jpeg-js
Uncontrolled resource consumption in jpeg-js before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image...
08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3426 more potentially affected by CVE-2020-8175 via jpeg-js (>=0.0.1, <=0.3.7)
jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2020-8175 Source advisory: OSV:GHSA-W7Q9-P3JQ-FMHM...
GHSA-W7Q9-P3JQ-FMHM Uncontrolled resource consumption in jpeg-js
Uncontrolled resource consumption in jpeg-js before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image...
ffjpeg suffers from a buffer overflow vulnerability
ffjpeg is a public library for the JPEG image format. A buffer overflow vulnerability exists in ffjpeg that can be exploited by an attacker to cause a denial of service...
JHead: Multiple vulnerabilities
Background JHead is an exif jpeg header manipulation tool. Description Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...