Lucene search
+L

2107 matches found

OSV
OSV
added 2016/10/28 2:59 p.m.2 views

UBUNTU-CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

7.8CVSS8.1AI score0.02563EPSS
Exploits2References4
NVD
NVD
added 2016/10/28 2:59 p.m.18 views

CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

7.8CVSS8.3AI score0.02563EPSS
Exploits2References6
OSV
OSV
added 2016/10/28 2:59 p.m.1 views

DEBIAN-CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

7.8CVSS9.3AI score0.02563EPSS
Exploits2References1
OSV
OSV
added 2016/10/28 2:59 p.m.12 views

CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

7.8CVSS7.3AI score
Exploits0References6
CVE
CVE
added 2016/10/28 2:0 p.m.200 views

CVE-2016-8332

CVE-2016-8332 describes a buffer/heap overflow in OpenJPEG 2.1.1’s JPEG2000 parser. A crafted JPEG2000 image can trigger an out-of-bounds heap write, causing heap corruption and arbitrary code execution when a user opens a malicious file. PDF workflows using embedded JPEG2000 content and OpenJPEG...

7.8CVSS8.6AI score0.02563EPSS
Exploits2References6Affected Software1
Cvelist
Cvelist
added 2016/10/28 2:0 p.m.40 views

CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

7.5CVSS8.6AI score0.02563EPSS
Exploits2References6
Debian CVE
Debian CVE
added 2016/10/28 2:0 p.m.37 views

CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap...

7.8CVSS8.8AI score0.02563EPSS
Exploits2
OSV
OSV
added 2016/10/23 8:49 a.m.10 views

MGASA-2016-0353 Updated openjpeg packages fix security vulnerability

The openjpeg library was vulnerable to a crash when converting images due to a NULL pointer dereference in readpnmheader CVE-2016-7445...

7.5CVSS6.3AI score0.04191EPSS
Exploits1References3
Mageia
Mageia
added 2016/10/23 8:49 a.m.44 views

Updated openjpeg packages fix security vulnerability

The openjpeg library was vulnerable to a crash when converting images due to a NULL pointer dereference in readpnmheader CVE-2016-7445...

7.5CVSS2.4AI score0.04191EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2016/10/19 12:0 a.m.39 views

Fedora 24 : ghostscript (2016-53e8aa35f6)

This is a rebase of ghostscript package, to address several security issues : - CVE-2016-7977 - .libfile does not honor -dSAFER - CVE-2013-5653 - getenv and filenameforall ignore -dSAFER - CVE-2016-7976 - various userparams allow %pipe% in paths, allowing remote shell - CVE-2016-7978 - reference...

9.8CVSS7.4AI score0.23453EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2016/10/19 12:0 a.m.29 views

Fedora 23 : ghostscript (2016-1c13825502)

This is a rebase of ghostscript package, to address several security issues : - CVE-2016-7977 - .libfile does not honor -dSAFER - CVE-2013-5653 - getenv and filenameforall ignore -dSAFER - CVE-2016-7976 - various userparams allow %pipe% in paths, allowing remote shell - CVE-2016-7978 - reference...

9.8CVSS7.4AI score0.23453EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2016/10/12 12:0 a.m.34 views

FreeBSD : openjpeg -- multiple vulnerabilities (b7d56d0b-7a11-11e6-af78-589cfc0654e1)

Tencent's Xuanwu LAB reports : A Heap Buffer Overflow Out-of-Bounds Write issue was found in function opjdwtinterleavev of dwt.c. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenJPEG. An integer overflow issue exists in function...

8.8CVSS7.6AI score0.07114EPSS
Exploits1References5
seebug.org
seebug.org
added 2016/10/10 12:0 a.m.29 views

OpenJPEG JPEG2000 mcc record remote code execution vulnerability

No description provided by source...

7.1AI score
Exploits0
Fedora
Fedora
added 2016/10/09 9:26 a.m.37 views

[SECURITY] Fedora 23 Update: openjpeg2-2.1.2-1.fc23

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

7.5CVSS4.4AI score0.04191EPSS
Exploits1
Fedora
Fedora
added 2016/10/09 3:17 a.m.43 views

[SECURITY] Fedora 25 Update: openjpeg2-2.1.2-1.fc25

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

7.5CVSS4.4AI score0.04191EPSS
Exploits1
myhack58
myhack58
added 2016/10/09 12:0 a.m.19 views

Vulnerability alert: JPEG 2 0 0 0 a vulnerability to execute arbitrary code-a vulnerability warning-the black bar safety net

Vulnerability number CVE-2 0 1 6-8 3 3 2 TALOS-2 0 1 6-0 1 9 3 Affected version OpenJpeg openjp2 2.1.1 Vulnerability description Recently, Cisco's Talos security team disclosed a JPEG 2 0 0 0 of a zero-day exploit, the vulnerability can execute arbitrary code. OpenJPEG is an open-source JPEG 2 0 ...

1.1AI score
Exploits0
CNVD
CNVD
added 2016/10/05 12:0 a.m.5 views

Remote Code Execution Vulnerability in OpenJPEG JPEG 2000

OpenJPEG is an open source JPEG 2000 codec written in C language. A remote code execution vulnerability exists in OpenJPEG JPEG 2000, which can be exploited by an attacker to trigger a heap crash or execute arbitrary code via a specially crafted packet...

7.8CVSS9.8AI score0.02563EPSS
Exploits2References1
The Hacker News
The Hacker News
added 2016/10/03 10:23 p.m.60 views

Beware! You Can Get Hacked Just by Opening a 'JPEG 2000' Image

Researchers have disclosed a critical zero-day vulnerability in the JPEG 2000 image file format parser implemented in OpenJPEG library, which could allow an attacker to remotely execute arbitrary code on the affected systems. Discovered by security researchers at Cisco Talos group, the zero-day...

6.8CVSS7.8AI score0.02563EPSS
Exploits2
NVD
NVD
added 2016/10/03 4:9 p.m.13 views

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

7.5CVSS6.2AI score0.04191EPSS
Exploits1References7
OSV
OSV
added 2016/10/03 4:9 p.m.9 views

CVE-2016-7445

convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...

7.5CVSS6.1AI score
Exploits0References7
Rows per page
Query Builder