CVE-2013-6054

Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045...

CVE-2013-1447

OpenJPEG 1.3 and earlier allows remote attackers to cause a denial of service memory consumption or crash via unspecified vectors related to NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6045

OpenJPEG (versions 1.3 and earlier) contains heap-based buffer overflows that affect the JPEG2000 decoding path, leading to remote code execution or crashes. CVE-2013-6045 is the original issue; CVE-2014-0158 documents a related flaw in j2k_decode/j2k_read_eoc/tcd_decode_tile interaction. Remedia...

CVE-2013-1447

OpenJPEG prior to 1.5.2 had CVE-2013-1447: potential denial of service via memory consumption or crash caused by NULL pointer dereferences, division-by-zero, and related issues. Debian advisory notes this as part of a set including CVE-2013-6045 and others; remediation is to upgrade to a patched ...

PT-2013-1169 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 1.3 and earlier OpenJPEG versions prior to 1.5.2 Description: The issue involves multiple heap-based buffer overflows in OpenJPEG, which may allow remote attackers to execute arbitrary code via unspecified vectors...

[SECURITY] [DSA 2808-1] openjpeg security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2808-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 03, 2013 http://www.debian.org/security/faq -...

Debian DSA-2808-1 : openjpeg - several vulnerabilities

Several vulnerabilities have been discovered in OpenJPEG, a JPEG 2000 image library, that may lead to denial of service CVE-2013-1447 via application crash or high memory consumption, possible code execution through heap buffer overflows CVE-2013-6045 , information disclosure CVE-2013-6052 , or y...

[SECURITY] [DSA 2808-1] openjpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2808-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 03, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2808-1 (openjpeg - several vulnerabilities)

Several vulnerabilities have been discovered in OpenJPEG, a JPEG 2000 image library, that may lead to denial of service CVE-2013-1447 via application crash or high memory consumption, possible code execution through heap buffer overflows CVE-2013-6045, information disclosure CVE-2013-6052, or yet...

DSA-2808-1 openjpeg - several

Bulletin has no description...

Debian: Security Advisory (DSA-2808-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201310-07 : OpenJPEG: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201310-07 OpenJPEG: User-assisted execution of arbitrary code OpenJPEG contains an invalid free error and multiple buffer overflow flaws. Please review the CVE identifiers referenced below for details. Impact : A remote attacker...

OpenJPEG: User-assisted execution of arbitrary code

Background OpenJPEG is an open-source JPEG 2000 library. Description OpenJPEG contains an invalid free error and multiple buffer overflow flaws. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted JPEG file,...

Amazon Linux AMI : openjpeg (ALAS-2012-125)

It was found that OpenJPEG failed to sanity-check an image header field before using it. A remote attacker could provide a specially crafted image file that could cause an application linked against OpenJPEG to crash or, possibly, execute arbitrary code. CVE-2012-3535 C Tenable Network Security,...

Amazon Linux AMI : openjpeg (ALAS-2012-111)

An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially crafted image file that, when decoded using an application linked against OpenJPEG, would cause th...

Oracle Linux 6 : openjpeg (ELSA-2012-1283)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1283 advisory. 1.3-9 - Apply patch for CVE-2012-3535 Resolves: CVE-2012-3535 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 17 : openjpeg-1.4-15.fc17 (2013-8953)

CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Oracle Linux 6 : openjpeg (ELSA-2012-1068)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1068 advisory. - Apply patches for CVE-2009-5030, CVE-2012-3358 Resolves: 831561 Tenable has extracted the preceding description block directly from the Oracle Linux...

Fedora Update for openjpeg FEDORA-2013-8953

Check for the Version of openjpeg OpenVAS Vulnerability Test Fedora Update for openjpeg FEDORA-2013-8953 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openjpeg FEDORA-2013-8953

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...