CVSS: 10.0EPSS: 4%CPEs: 1EXPL: 0CVE-2012-3358 – openjpeg: heap-based buffer overflow when processing JPEG2000 image files
https://notcve.org/view.php?id=CVE-2012-3358
18 Jul 2012 — Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted (1) tile number or (2) tile length in a JPEG 2000 image file. Múltiples desbordamientos de búfer basados memoria dínámica en la función j2k_read_sot en j2k.c en OpenJPEG v1.5, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrar... • http://code.google.com/p/openjpeg/source/detail?r=1727 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow •
CVSS: 7.8EPSS: 4%CPEs: 3EXPL: 0CVE-2009-5030 – openjpeg: Heap memory corruption leading to invalid free by processing certain Gray16 TIFF images
https://notcve.org/view.php?id=CVE-2009-5030
18 Jul 2012 — The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free." La función tcd_free_encode tcd.c en OpenJPEG v1.3 a v1.5 permite a atacantes remotos causar una denegación de servicio (corrupción de memoria) y posiblemente ejecutar código arbitrario a través de la inf... • http://code.google.com/p/openjpeg/issues/detail?id=5 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 3%CPEs: 2EXPL: 0CVE-2012-1499
https://notcve.org/view.php?id=CVE-2012-1499
11 Apr 2012 — The JPEG 2000 codec (jp2.c) in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write." El codec JPEG 2000 en OpenJPEG anteriores a v1.5 no direcciona la memoria de forma correcta durante el análisis sintáctico, lo que provoca que atacantes remotos puedan ejecutar código a través de un fichero manipulado. • http://code.google.com/p/openjpeg/source/detail?r=1330 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •