JPEG Files Containing Suspicious Comments

Certain JPEG files may contain malicious code, hidden within the comments marker...

Heap overflow

Heap-based buffer overflow in the xjpegls.dll aka JLS, JPEG-LS, or JPEG lossless format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file...

CVE-2012-4988

Heap-based buffer overflow in the xjpegls.dll aka JLS, JPEG-LS, or JPEG lossless format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file...

CVE-2012-4988

XnView 1.99 and 1.99.1 are affected by a heap-based buffer overflow in the xjpegls.dll (JPEG-LS) plugin when processing crafted JLS images, enabling remote code execution. The vulnerability arises during JLS decompression in the XnView Formats PlugIn; PoCs and exploits exist (e.g., for XnView 1.9...

xnview <= 1.98.5 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: XnView http://www.xnview.com Versions: = 1.98.5 Platforms: Windows Bugs: A integer overflow in width/height calculation B jpeg heap overflow C ICO heap overflow D PCX heap overflow E FLI heap overflow Exploitation: via file Date: 16 F...

GeoVision Digital Surveillance System 6.0 4/6.1 Unauthorized JPEG Image Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue results from an access validation error. GeoVision...

Inmatrix Ltd. Zoom Player 8.5 - (.jpeg) Exploit

No description provided by source. Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ Software Link:...

ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC

No description provided by source. / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg...

Cool PDF Image Stream Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Microsoft Internet Explorer 5.0.1 JPEG Image Rendering CMP Fencepost Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282...

Irfan Skiljan IrfanView32 3.0.7 Image File Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/781/info IrfanView32, a freeware image viewer, has a problem in the handling of Adobe Photoshop generated jpegs. If a .jpg file is opened for viewing that contains the Adobe Photoshop marker in the header 8BPS followed by...

Coppermine Photo Gallery 1.0 PHP Code Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7300/info Coppermine Photo Gallery has been reported prone to PHP code injection attacks. Due to a lack of sufficient sanitization performed on user-supplied filenames that are uploaded into the Photo Gallery, an attacker...

IrfanView TIF Image Decompression Buffer Overflow Vulnerability

No description provided by source. Application: IrfanView TIF Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...

Tony Cook Imager 0.4x JPEG and TGA Images Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17415/info The Perl Imager module is susceptible to a denial-of-service vulnerability. This issue is due to a failure of the software to properly handle unexpected image data. Malformed image files may cause a crash in...

Mozilla Firefox 3.0 - Malformed JPEG File Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29984/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. This issue affects Firefox...

Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities

No description provided by source. Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...

Microsoft Internet Explorer 5.0.1 JPEG Image Rendering Unspecified Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the application to properly bounds check input...

Netscape Communicator 4.x JPEG-Comment Heap Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to process these comments...

deV!Lz Clanportal [DZCP] <= 1.3.6 - Arbitrary File Upload Vulnerability

No description provided by source. S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code and execute it,...

openSUSE Security Update : seamonkey (openSUSE-SU-2014:0008-1)

This update fixes the following security issues with SeaMonkey : - update to SeaMonkey 2.23 bnc854370 - requires NSPR 4.10.2 and NSS 3.15.3.1 - MFSA 2013-104/CVE-2013-5609/CVE-2013-5610 Miscellaneous memory safety hazards - MFSA 2013-105/CVE-2013-5611 bmo771294 Application Installation doorhanger...