April 11, 2017—KB4015550 (Monthly Rollup)

None None...

April 11, 2017—KB4015583 (OS Build 15063.138)

None None...

Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the libjpeg information disclosure vulnerability, go to CVE-2013-6629. More Information Important If you install a language pack after you...

Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the libjpeg information disclosure vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2013-6629. More Information Important If you install a language pack after you install this update, you must...

Security update for the libjpeg information disclosure vulnerability for Microsoft Silverlight 5: April 11, 2017

Security update for the libjpeg information disclosure vulnerability for Microsoft Silverlight 5: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2013-6629. More Information Important All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows...

KLA11835 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A memory corrupti...

KLA11061 Information disclosure vulnerability in Microsoft Windows

An incorrect handling of objects in memory has been found in libjpeg image-processing library functionality used in Microsoft Windows. Malicious users can exploit this vulnerability to obtain sensitive information. This vulnerability can be exploited remotely by convincing a user to run a special...

KB4017094: Security Update for the libjpeg Information Disclosure Vulnerability for Microsoft Silverlight 5 (April 2017)

The version of Silverlight 5 installed on the remote Windows host is missing security update KB4017094. It is, therefore, affected by an information disclosure vulnerability in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remo...

KB4015221: Windows 10 Version 1507 April 2017 Cumulative Update

The remote Windows 10 Version 1507 host is missing security update KB4015221. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the open-source libjpeg image processing library due to improper handling of objects in memory. An...

Null pointer dereference

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

CVE-2016-3616

The CVE-2016-3616 issue affects the cjpeg utility in libjpeg/libjpeg-turbo, caused by a NULL pointer dereference in libjpeg that can lead to denial of service and potentially arbitrary code execution via a crafted JPEG. Multiple connected advisories confirm affected contexts (Debian, Red Hat, Cen...

CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

CVE-2016-3616: NULL Pointer Dereference

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

PT-2017-8403

Name of the Vulnerable Software and Affected Versions libjpeg affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, or potentially execute arbitrary code. This is achieved through ...

UBUNTU-CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file...

libjpeg-turbo out-of-bounds read remote code execution vulnerability

libjpeg is a C library maintained by the Independent JPEG Group IJG that contains JPEG decoding, JPEG encoding, and other JPEG functions. libjpeg-turbo is a modified version of libjpeg optimized for x86 and x86-64 processors. A remote code execution vulnerability exists in libjpeg-turbo. An...

GLSA-201612-55 : libjpeg-turbo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201612-55 libjpeg-turbo: User-assisted execution of arbitrary code The accelerated Huffman decoder was previously invoked if there were 128 bytes in the input buffer. However, it is possible to construct a JPEG image with Huffman...