2382 matches found
Double free
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
DEBIAN-CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
UBUNTU-CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
CVE-2015-1239
CVE-2015-1239 is a vulnerability in OpenJPEG (used by PDFium in Google Chrome) where a double free in j2k_read_ppm_v3 can cause a remote-denial of service (process crash) via a crafted PDF. Affected software is OpenJPEG prior to r2997; impact is crash/DoS with no confidentiality or integrity loss...
CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
CVE-2015-1239
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
CVE-2015-1239: Double Free
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...
PT-2017-6480
Name of the Vulnerable Software and Affected Versions OpenJPEG versions before r2997 PDFium in Google Chrome affected versions not specified Description The issue is related to a double free vulnerability in the j2k read ppm v3 function. This vulnerability allows remote attackers to cause a denia...
OpenJPEG JPEG2000 mcc record Code Execution Vulnerability(CVE-2016-8332)
Summary An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful...
Slackware 14.2 / current : openjpeg (SSA:2017-279-02)
New openjpeg packages are available for Slackware 14.2 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2017-279-02. The text itself is copyright C...
AZL-43813 CVE-2015-2158 affecting package openjpeg2 2.3.1-12
Off-by-one error in the pngcrushmeasureidat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file...
AZL-44589 CVE-2015-2158 affecting package openjpeg2 2.3.1-12
Off-by-one error in the pngcrushmeasureidat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file...
[slackware-security] openjpeg
New openjpeg packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openjpeg-2.3.0-i586-1slack14.2.txz: Upgraded. This update fixes security issues which may lead to a denial of service or possibly...
[SECURITY] Fedora 27 Update: openjpeg2-2.2.0-3.fc27
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...
OpenJPEG heap buffer overflow vulnerability (CNVD-2017-34866)
OpenJPEG is an open source JPEG 2000 codec written in C language. OpenJPEG suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause a heap buffer overflow due to insufficient imagetopnm checks...
OPENSUSE-SU-2017:2568-1 Recommended update for openjpeg
This update for openjpeg fixes the following vulnerability: CVE-2016-7445: Null pointer dereference in convert.c could lead to crash bsc999817 The following bug was also fixed: - Programs linked with libopenjpeg1 would expose non-standard math behavior due to usage of -ffast-math in openjpeg...
[SECURITY] Fedora 25 Update: openjpeg2-2.2.0-3.fc25
The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...