UBUNTU-CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

DEBIAN-CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

PT-2017-6480 · Google +2 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions before r2997 PDFium in Google Chrome affected versions not specified Description: The issue is related to a double free vulnerability in the j2k read ppm v3 function. This vulnerability allows remote attackers to cause a...

[slackware-security] gegl

New gegl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/gegl-0.2.0-i586-4slack14.2.txz: Rebuilt. Patched integer overflows in operations/external/ppm-load.c that could allow a...

Delta Industrial Automation PMSoft Stack Buffer Overflow Vulnerability (CNVD-2017-228255)

Delta Industrial Automation is a global industrial automation manufacturer of power management and thermal solutions. WPLSoft and PMSoft are Delta's PLC programming software. A stack buffer overflow vulnerability exists in the parsing of information from a TTreeView object in a ppm project file...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0696-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

Delta Industrial Automation PMSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Delta Industrial Automation PMSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2016-5533

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2016-05449)

Oracle Primavera is a set of Oracle Oracle for project-intensive industries enterprise project portfolio management EPPM solution. The solution helps organizations assess project risks and rewards, determine the resources and skills needed to get the job done, and more. A security vulnerability i...

CVE-2016-4370

HPE Project and Portfolio Management Center PPM 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors...

Design/Logic Flaw

HPE Project and Portfolio Management Center PPM 9.2x and 9.3x before 9.32.0002 allows remote authenticated users to execute arbitrary commands or obtain sensitive information via unspecified vectors...

CVE-2016-4370

Affected product: HPE Project and Portfolio Management Center (PPM). Vulnerable versions: 9.2x and 9.3x prior to 9.32.0002. Issue: remote authenticated users can execute arbitrary commands or obtain sensitive information via unspecified vectors. Root cause details are not specified in the provide...

openSUSE Security Update : gegl (openSUSE-SU-2012:1627-1)

Fix integer overflow by parsing PPM image. bnc789835, CVE-2012-4433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-841. The text description of this plugin is C SUSE LLC...

GEGL: User-assisted execution of arbitrary code

Background GEGL is a graph-based image processing framework. Description Multiple integer overflows in GEGL may cause a heap-based buffer overflow. Impact A remote attacker could entice a user to open a specially crafted PPM image using an application linked against GEGL, possibly resulting in...

Paypal Persistent Cross Site Scripting

Title: ====== Paypal Bug Bounty 12 - PPM Listing Vulnerability Date: ===== 2013-05-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=649 VL-ID: ===== 649 Common Vulnerability Scoring System: ==================================== 4.2 Introduction: ============= PayPal is...

Paypal Bug Bounty #12 - PPM Listing Vulnerability

Document Title: =============== Paypal Bug Bounty 12 - PPM Listing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=649 Release Date: ============= 2013-05-30 Vulnerability Laboratory ID VL-ID: ==================================== 649 Common...

Mandriva Linux Security Advisory : libtiff (MDVSA-2013:046)

Updated libtiff packages fix security vulnerabilities : libtiff did not properly convert between signed and unsigned integer values, leading to a buffer overflow. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application linked against...

libtiff security update

CentOS Errata and Security Advisory CESA-2012:1590 Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow...

Debian Security Advisory DSA 2575-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 2575-1. OpenVAS Vulnerability Test $Id: deb25751.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2575-1 tiff Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...