CVE-2015-6776

CVE-2015-6776 affects OpenJPEG (opj_dwt_decode_1* in dwt.c) as used by PDFium in Google Chrome prior to 47.0.2526.73, allowing remote attackers to trigger a denial of service via crafted JPEG 2000 data. The Debian and Gentoo entries confirm Chrome/Chromium exposure and Python fix guidance: upgrad...

chromium-browser: Out of bounds access in PDFium

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

Gnome Nautilus 3.16 - Denial of Service

Gnome Nautilus 3.16 - Denial of Service Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link:...

Gnome Nautilus 3.16 Denial Of Service Vulnerability

Gnome Nautilus version 3.16 suffers from a denial of service vulnerability. Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage:...

Gnome Nautilus 3.16 - Denial of Service

Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link: https://wiki.gnome.org/Apps/Nautilus Version: 3.16 Tested...

FreeBSD : ffmpeg -- multiple vulnerabilities (b0da85af-21a3-4c15-a137-fe9e4bc86002)

NVD reports : The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race...

Gnome Nautilus 3.16 Denial Of Service

Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link: https://wiki.gnome.org/Apps/Nautilus Version: 3.16 Tested...

ffmpeg -- multiple vulnerabilities

NVD reports: The updatedimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service race conditi...

CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

CVE-2015-8363

The jpeg2000readmainheaders function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allows remote attackers to cause a denial of service out-of-bounds heap-memory access or...

CVE-2015-8363

CVE-2015-8363 affects FFmpeg libavcodec/jpeg2000dec.c: jpeg2000_read_main_headers did not enforce SIZ marker uniqueness, enabling possible denial of service via crafted JPEG 2000 images with two or more SIZ markers. Other listed advisories (CVE-2015-8364, CVE-2015-8365, etc.) show additional FFmp...

Mozilla: Buffer overflow during image interactions in canvas (MFSA 2015-123)

Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via vectors involving a CANVAS element and crafted JavaScript code...

Oracle Outside In PDF 8.5.2 - Parsing Memory Corruption (1)

Application: Oracle Outside In Platforms: Windows Versions: 8.5.2 CVE: CVE-2015-4877 Author: Francis Provencher of COSIG Twitter: @COSIG 1 Introduction 2 Report Timeline 3 Technical details 4 POC =============== 1 Introduction =============== Oracle Outside In Technology provides software...

FFmpeg 'init_tile' Function Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'inittile' function in the libavcodec/jpeg2000dec.c file in versions of FFmpeg prior to 2.8.2. Due to the program failing to enforce maximum and minim...

CVE-2015-8219

The inittile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JP...

DEBIAN-CVE-2015-8219

The inittile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JP...

CVE-2015-8219

The inittile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JP...

CVE-2015-8219

The inittile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JP...

Out-of-bounds

The inittile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JP...

DEBIAN-CVE-2015-8216

The ljpegdecodeyuvscan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted MJPEG data...