Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-1089

Malware in sbrugna...

6.8CVSS6.4AI score0.02662EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.1 views

SUSE CVE-2011-4517

The jpccrggetparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service heap memory corruption, via a crafte...

6.8CVSS7.8AI score0.4213EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:49 a.m.2 views

SUSE CVE-2011-4516

Heap-based buffer overflow in the jpccoxgetcompparms function in libjasper/jpc/jpccs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted numrlvls value in a coding style default COD marker segment in a JPEG2000 file...

6.8CVSS8.2AI score0.47823EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2015/03/18 12:11 p.m.2 views

jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)

Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

7.5CVSS7.5AI score0.32606EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2014/12/18 6:30 p.m.2 views

jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)

Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

7.5CVSS7.2AI score0.32606EPSS
Exploits0References5
NVD
NVD
added 2012/02/13 7:55 p.m.17 views

CVE-2012-1051

Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

6.8CVSS7.9AI score0.02662EPSS
Exploits0References4
Prion
Prion
added 2012/02/13 7:55 p.m.15 views

Heap overflow

Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

6.8CVSS8.6AI score0.02662EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2012/02/13 7:55 p.m.11 views

Buffer overflow

Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

6.8CVSS8.5AI score0.02662EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2012/02/13 7:0 p.m.12 views

CVE-2012-1052

Buffer overflow in IvanView 1.2.15 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

7.8AI score0.02662EPSS
Exploits0References4
CVE
CVE
added 2012/02/13 7:0 p.m.40 views

CVE-2012-1052

CVE-2012-1052 affects IvanView 1.2.15, where a Buffer overflow in handling JPEG2000 (JP2) files with a crafted Quantization Default (QCD) marker segment allows remote code execution. The vulnerability arises from processing of the JP2 marker data, enabling an attacker to run arbitrary code on aff...

6.8CVSS8.1AI score0.02662EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2012/02/02 5:55 p.m.7 views

CVE-2012-0977

Stack-based buffer overflow in jp2x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

9.3CVSS8AI score0.06898EPSS
Exploits0References4
Prion
Prion
added 2012/02/02 5:55 p.m.9 views

Stack overflow

Stack-based buffer overflow in jp2x.dll in LuraWave JP2 ActiveX Control 2.1.5.5 and other versions before 2.1.5.11 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

9.3CVSS8.7AI score0.06898EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2012/02/02 5:55 p.m.8 views

Stack overflow

Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

6.8CVSS8.7AI score0.02366EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2012/02/01 12:0 a.m.39 views

IrfanView JPEG-2000 Plugin Remote Stack Based Buffer Overflow Vulnerability

This host has IrfanView with JPEG-2000 plugin installed and is prone to stack based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbirfanviewjpeg2000bofvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IrfanView JPEG-2000 Plugin Remote Stack Based Buffer Overflow Vulnerability Authors...

6.8CVSS0.4AI score0.66226EPSS
Exploits4References3
Prion
Prion
added 2012/01/20 5:55 p.m.16 views

Stack overflow

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

6.8CVSS8.5AI score0.66226EPSS
Exploits4References7Affected Software1
Cvelist
Cvelist
added 2012/01/20 5:0 p.m.18 views

CVE-2012-0897

Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

7.6AI score0.66226EPSS
Exploits4References7
CVE
CVE
added 2012/01/20 5:0 p.m.158 views

CVE-2012-0897

CVE-2012-0897: A stack-based buffer overflow in the IrfanView JPEG2000 plugin (JP2) allows remote code execution when parsing a crafted Quantization Default (QCD) marker in a JPEG2000 file. Affected: IrfanView PlugIns prior to 4.33. Impact, per sources: remote arbitrary code execution and possibl...

6.8CVSS7.9AI score0.66226EPSS
Exploits4References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2012/01/05 12:0 a.m.36 views

Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the JP2Deco component whi...

7.5CVSS3.6AI score0.01712EPSS
Exploits0References1
Rows per page
Query Builder