Lucene search

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

🗓️ 03 Mar 2021 00:00:00Reported by FireEyeType

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory. Discusses uninitialized memory vulnerabilities in Windows' inbuilt image parsers, detection mechanisms, and comparison with Linux

Reporter	Title	Published	Views	Family All 124
Microsoft CVE	Windows Imaging Component Information Disclosure Vulnerability	14 Jul 202007:00	–	mscve
Microsoft CVE	Windows Imaging Component Information Disclosure Vulnerability	10 Mar 202007:00	–	mscve
NVD	CVE-2014-1564	3 Sep 201410:55	–	nvd
NVD	CVE-2020-0853	12 Mar 202016:15	–	nvd
NVD	CVE-2020-1397	14 Jul 202023:15	–	nvd
Packet Storm	Mozilla Firefox Secret Leak	3 Sep 201400:00	–	packetstorm
Mozilla	Uninitialized memory use during GIF rendering — Mozilla	2 Sep 201400:00	–	mozilla
securityvulns	Uninit memory disclosure via truncated images in Firefox	15 Sep 201400:00	–	securityvulns
securityvulns	Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities	15 Sep 201400:00	–	securityvulns
Prion	Information disclosure	3 Sep 201410:55	–	prion

Source	Link
docs	www.docs.microsoft.com/en-us/windows-hardware/drivers/debugger/gflags-and-pageheap
lcamtuf	www.lcamtuf.blogspot.com/2014/09/cve-2014-1564-uninitialized-memory-when.html
devblogs	www.devblogs.microsoft.com/cppblog/addresssanitizer-asan-for-windows-with-msvc/
fireeye	www.fireeye.com/resources/fuzzing-image-parsing-in-windows-color-profiles

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Mar 2021 00:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.112