openSUSE Security Update : openjpeg (openSUSE-SU-2012:1370-1)

This update fixes a heap-based buffer overflow in OpenJPEG which could allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

FreeBSD : openjpeg -- Multiple vulnerabilities (02db20d7-e34a-11e3-bd92-bcaec565249c)

Openjpeg release notes report : That CVE-2012-3535 and CVE-2012-3358 are fixed in the 1.5.1 release. That CVE-2013-4289, CVE-2013-4290, CVE-2013-1447, CVE-2013-6045, CVE-2013-6052, CVE-2013-6054, CVE-2013-6053, CVE-2013-6887, where fixed in the 1.5.2 release. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2013-6053

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-6053

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

Heap overflow

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-6053

OpenJPEG 1.5.1 (CVE-2013-6053) is affected by a heap-based out-of-bounds read that could allow a remote attacker to obtain sensitive information via unspecified vectors. Public advisories (GLSA 2014-412-24, Fedora update FEDORA-2014-17053/12507, Gentoo GLSA and OpenVAS entries) confirm multiple O...

CVE-2013-6053

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-6887

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

Null pointer dereference

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6887

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6887

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6887

OpenJPEG 1.5.1 is affected by CVE-2013-6887, allowing remote denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors. The issue is documented in multiple sources (NVD entry for CVE-2013-6887 and related open-source advisories). The prov...

[SECURITY] [DSA 2808-2] openjpeg regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2808-2 [email protected] http://www.debian.org/security/ Raphael Geissert April 22, 2014 http://www.debian.org/security/faq -...

DSA-2808-2 openjpeg - regression update

Bulletin has no description...

CVE-2013-4289

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow...

CVE-2013-4290

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...

Integer overflow

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow...

CVE-2013-4290

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...

CVE-2013-4289

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow...

Stack overflow

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...