DEBIAN-CVE-2016-5316

Out-of-bounds read in the PixarLogCleanup function in tifpixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool...

UBUNTU-CVE-2016-5316

Out-of-bounds read in the PixarLogCleanup function in tifpixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool...

PT-2017-8357

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.1.1 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by using a crafted jpeg2000 file. This is related to the sycc422 t rgb function in common/color.c...

PT-2020-8033 · Openjpeg +1 · Openjpeg +1

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.1.1 Description: The issue allows attackers to cause a denial of service, specifically memory corruption, by using a crafted jpeg 2000 file. This is due to a problem in the color esycc to rgb function...

PT-2017-8530

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 2.1.1 Description The issue is related to a heap-based buffer overflow in the color cmyk to rgb function, located in the common/color.c file. This can be triggered by remote attackers sending a crafted .j2k file,...

OpenJPEG 'sycc422_to_rgb_of_color' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's sycc422torgbofcolor function allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...

OpenJPEG 'color_esycc_to_rgb' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's coloresycctorgb function allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks or to remotely execute arbitrary code...

OpenJPEG heap buffer overflow vulnerability (CNVD-2016-03345)

OpenJPEG is a C-based open source JPEG 2000 codec . A heap buffer overflow vulnerability exists in the 'colorcmyktorgb' function in OpenJPEG's color.c file. An attacker could exploit this vulnerability to cause a denial of service...

OpenJPEG 'color_cmyk_to_rgb' function heap overflow vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's colorcmyktorgb function allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks or to remotely execute arbitrary code...

CVE-2016-1651

fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420torgb and sycc422torgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via...

chromium-browser: out-of-bounds read in Pdfium JPEG2000 decoding

fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420torgb and sycc422torgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via...

RGB Express - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RGB Express published at the 'play' market has multiple vulnerabilities...

RGB Master - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application RGB Master published at the 'play' market has multiple vulnerabilities...

Wifi RGB LED Controller - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Wifi RGB LED Controller published at the 'play' market has multiple vulnerabilities...

ALPINE-CVE-2016-2328

libswscale/swscaleunscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service out-of-bounds array read access or possibly have unspecified other impact via a crafted .cine file, related to the bayertorgb24wrapper and...

UBUNTU-CVE-2016-2328

libswscale/swscaleunscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service out-of-bounds array read access or possibly have unspecified other impact via a crafted .cine file, related to the bayertorgb24wrapper and...

Google Chrome PDFium integer overflow vulnerability (CNVD-2016-00808)

Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. The 'sycc422torgb' and 'sycc444torgb' functions in the fxcodec/codec/fxcodecjpxopj.cpp file of PDFium used by Google Chrome have an integer overflow vulnerability that can be exploited by a remote attacker to...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to obtain sensitive information about color objects from proces...

PT-2015-2365

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions affected versions not specified Adobe Acrobat Document Cloud versions affected versions not specified Adobe Reader versions affected versions not specified Adobe Reader Document Cloud versions affected versions not...

SUSE SLED11 Security Update : lcms2 (SUSE-SU-2013:1250-1)

lcms2 has been updated to the version 2.5 which is a maintenance release to fix various security and other bugs. - User defined parametric curves can now be saved in ICC profiles. - RGB profiles using same tone curves for several channels are storing now only one copy of the curve - update black...