[SECURITY] Fedora 24 Update: jasper-1.900.13-1.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Foxit Reader JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10434)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 suffers from a null pointer access vulnerability in the convert.cjp2:1289 imagetopnm function, which can lead to a denial of service via a constructed j2k file...

UBUNTU-CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

UBUNTU-CVE-2016-9116

NULL Pointer Access in function imagetopnm of convert.c:2226jp2 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer due to a null pointer that is not adequately fixed. An attacker could exploit this vulnerability to cause the application to...

[SECURITY] Fedora 25 Update: jasper-1.900.13-1.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

Apple fixes malicious JPEG exploit and a large number of security vulnerabilities-vulnerability warning-the black bar safety net

Foreword According to the foreign media to the latest reports, Apple in the U.S. local time on Monday officially fixes the iOS system in a code execution vulnerability. It is understood that the attacker or the use of a carefully crafted JPEG file exploit this vulnerability to attack. In addition...

CoreGraphics Memory Corruption Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; watchOS is a smart watch operating system. coreGraphics is a built-in graphic framework component for iOS. A memory corruption vulnerability exists in CoreGraphics in several Apple products. An...

LibTIFF TIFF2PDF TIFFTAG_JPEGTABLES Remote Code Execution Vulnerability

Summary An exploitable heap based buffer overflow exists in the handling of TIFF images in LibTIFF’s TIFF2PDF tool. A crafted TIFF document can lead to a heap based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means...

Warning! Your iPhone Can Get Hacked Just by Opening a JPEG Image, PDF or Font File

What's worse than knowing that innocent looking JPEGs, PDFs and font files can hijack your iPhone, iPad, and iPod. Yes, attackers can take over your vulnerable Apple's iOS device remotely – all they have to do is trick you to view a maliciously-crafted JPEG graphic or PDF file through a website o...

About the security content of macOS Sierra 10.12.1, Security Update 2016-002 El Capitan, and Security Update 2016-006 Yosemite

About the security content of macOS Sierra 10.12.1, Security Update 2016-002 El Capitan, and Security Update 2016-006 Yosemite This document describes the security content of macOS Sierra 10.12.1, Security Update 2016-002 El Capitan, and Security Update 2016-006 Yosemite. About Apple security...

JasPer Denial of Service Vulnerability (CNVD-2016-10299)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer 1.900.5. An attacker could exploit this vulnerability to crash the application, resulting in a denial of service...

JasPer heap buffer overflow vulnerability (CNVD-2016-10306)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in the JasPer function jpcdeccpsetfromcox, which can be exploited by an attacker to execute arbitrary script and code in the context of...

JasPer Null Pointer Backreference Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. JasPer bmpdec.c:394:5 contains a null pointer back-reference vulnerability that can be exploited by an attacker to crash an application and deny service to a legitimate user...

JasPer Denial of Service Vulnerability (CNVD-2016-10304)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer jasmalloc.c, which can be exploited by attackers to crash an application and deny service to legitimate users...

JasPer null pointer back-reference vulnerability (CNVD-2016-10303)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A security vulnerability exists in JasPer bmpdec.c:398:5, which can be exploited by attackers to crash an application and deny service to legitimate users...

JasPer Heap Buffer Overflow Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A heap buffer overflow vulnerability exists in the JasPer function jpcgetuint16, which can be exploited by an attacker to execute arbitrary script and code in the context of an...

JasPer 'jp2_cod.c' Denial of Service Vulnerability

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in the JasPer function jp2colrdestroy, which can be exploited by an attacker to crash an application and deny service to a legitimate user...

JasPer Denial of Service Vulnerability (CNVD-2016-10047)

JasPer is a Canadian software developer Michael Adams developed an open source implementation of the JPEG-2000 codec. A denial of service vulnerability exists in JasPer, which can be exploited by an attacker to crash an application and cause a denial of service...