OpenJPEG: Multiple vulnerabilities

Background OpenJPEG is an open-source JPEG 2000 library. Description Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted JPEG file, possibly resulting in...

GLSA-201612-26 : OpenJPEG: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-26 OpenJPEG: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...

OpenJPEG Remote Heap Buffer Overflow Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A remote heap buffer overflow vulnerability exists in OpenJPEG versions 1.3 and 1.5.1. An attacker could exploit this vulnerability to execute arbitrary code in the context of a user-run application, which could also result in a denial of servic...

CVE-2016-9675

A vulnerability was found in the patch for CVE-2013-6045 for OpenJPEG. A specially crafted JPEG2000 image, when read by an application using OpenJPEG, could cause heap-based buffer overflows leading to a crash or possible code execution...

Updated openjpeg2 packages fix security vulnerabilities

A specially crafted JPEG2000 image file can force Out-Of-Bounds Read in opjtcdfreetile CVE-2016-3181. A specially crafted JPEG2000 image file can force Heap Corruption in opjfree CVE-2016-3182. A specially crafted JPEG2000 image file can force Out-Of-Bounds Read in sycc422torgb CVE-2016-3183...

MGASA-2016-0362 Updated openjpeg2 packages fix security vulnerabilities

A specially crafted JPEG2000 image file can force Out-Of-Bounds Read in opjtcdfreetile CVE-2016-3181. A specially crafted JPEG2000 image file can force Heap Corruption in opjfree CVE-2016-3182. A specially crafted JPEG2000 image file can force Out-Of-Bounds Read in sycc422torgb CVE-2016-3183...

OpenJPEG JPEG2000 Image Processing Out-of-Bounds Write (CVE-2016-8332)

An out-of-bounds write vulnerability has been discovered in OpenJPEG. The vulnerability is due to a lack of validation on the index values of MCC markers when parsing maliciously crafted JPEG2000 image files. A remote attacker could exploit this vulnerability by enticing a user to open a maliciou...

OpenJPEG heap buffer overflow vulnerability (CNVD-2016-10433)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 suffers from a heap buffer overflow vulnerability in the convert.c:1719 pnmtoimage function, which can lead to arbitrary code execution or denial of service...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10434)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 suffers from a null pointer access vulnerability in the convert.cjp2:1289 imagetopnm function, which can lead to a denial of service via a constructed j2k file...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10435)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 suffers from a null pointer access vulnerability in the convert.c:2226jp2 imagetopnm function, which can lead to a denial of service via a constructed j2k file...

OpenJPEG Single Byte Overflow Vulnerability

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 suffers from a single-byte overflow vulnerability in the openjp2/pi.c:523 opjpinextcprl function, which can lead to a denial of service...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10436)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 has a null pointer access vulnerability in the convert.c:1943jp2 imagetopnm function, where image-compscompno.data is not assigned a value after initialization, which can lead to a denial of service...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-10438)

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 has a null pointer access vulnerability in the convertbmp.c:980 imagetopnm function, where image-compscompno.data is not assigned a value after initialization, which can lead to a denial of service...

OpenJPEG Heap Buffer Out-of-Bounds Read Vulnerability

OpenJPEG library is written in C language open source JPEG 2000 codec . OpenJPEG 2.1.2 contains a heap buffer out-of-bounds read vulnerability in the convert.cjp2:942 imagetotga function, which can cause a denial of service via a constructed j2k file...

CVE-2016-9118

Heap Buffer Overflow WRITE of size 4 in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2...

CVE-2016-9118

Heap Buffer Overflow WRITE of size 4 in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2...

DEBIAN-CVE-2016-9118

Heap Buffer Overflow WRITE of size 4 in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2...

CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...

DEBIAN-CVE-2016-9117

NULL Pointer Access in function imagetopnm of convert.cjp2:1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file...