libjpeg: information leak (read of uninitialized memory)

The getsos function in jdmarker.c in 1 libjpeg 6b and 2 libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan SOS JPEG markers,...

OpenJDK: JPEG decoder input stream handling (2D, 8029854)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

OpenJDK: JPEG decoder input stream handling (2D, 8029854)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

OpenJDK: JPEG decoder input stream handling (2D, 8029854)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

[SECURITY] Fedora 20 Update: ImageMagick-6.8.6.3-4.fc20

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

CVE-2014-0349

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

Code injection

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

CVE-2014-0349

CVE-2014-0349 involves multiple unspecified vulnerabilities in the J2k-Codec JPEG 2000 decoding library (Windows). A crafted JPEG 2000 file may allow a remote attacker to execute arbitrary code with the privileges of the vulnerable application. Documents consistently describe remote code executio...

CVE-2014-0349

Multiple unspecified vulnerabilities in J2k-Codec allow remote attackers to execute arbitrary code via a crafted JPEG 2000 file...

J2k-Codec特制JPEG 2000文件处理多个任意代码执行漏洞

CVE ID:CVE-2014-0349 J2k-Codec是一个JPEG 2000解码器。 J2k-Codec处理JPEG 2000图像时存在多个安全漏洞，允许攻击者构建恶意图像文件，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 J2k-Codec 2.2 目前没有详细解决方案： http://j2k-codec.com/...

Microsoft Windows DirectShow JPEG Double Free (MS14-013; CVE-2014-0301) - ver 2

A double free vulnerability has been reported in Microsoft Windows DirectShow. The vulnerability is due to the way DirectShow handles JPEG images. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted JPEG file...

J2k-Codec contains multiple exploitable vulnerabilities

Overview J2k-Codec contains multiple exploitable vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description J2k-Codec is a JPEG 2000 decoding library for Windows. J2k-Codec contains multiple exploitable exploitable...

CVE-2013-0729

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...

Heap overflow

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...

CVE-2013-0729

Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...

CVE-2013-0729

The CVE-2013-0729 entry corresponds to a heap-based buffer overflow in Tracker Software PDF-XChange Viewer prior to 2.5.208, exploitable via a crafted Define Huffman Table header in a JPEG image stream embedded in a PDF. The affected component is the JPEG processing/parsing within the PDF pipelin...

Apple QuickTime STSD JPEG Atom Heap Corruption - Ver2 (CVE-2009-0007)

Apple's QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. There exists a heap buffer memory corruption vulnerability in Apple QuickTime. The vulnerability is due to lack...

Imagemagic security vulnerabilities

Memory corruptions on JPEG and PSD parsing...

Microsoft Paint JPEG Image Parsing Integer Overflow - Ver2 (CVE-2010-0028)

An integer overflow vulnerability has been reported in Microsoft Paint. The vulnerability is due to an integer overflow error when Microsoft Paint fails to properly decode a malformed JPEG image file. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary...

Microsoft Windows DirectShow JPEG Double Free (MS14-013; CVE-2014-0301)

A double free vulnerability has been reported in Microsoft Windows DirectShow. The vulnerability is due to the way DirectShow handles JPEG images. A remote attacker can exploit this vulnerability by enticing a user to download and process a maliciously crafted JPEG file...