121 matches found
Fedora 15 : libpng10-1.0.55-1.fc15 (2011-8844)
This update fixes a 1-byte uninitialized memory reference in pngformatbuffer. It allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. This is CVE-2011-2501. Also fixed in this...
Fedora 14 : libpng10-1.0.55-1.fc14 (2011-8867)
This update fixes a 1-byte uninitialized memory reference in pngformatbuffer. It allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. This is CVE-2011-2501. Also fixed in this...
Fedora 15 : mingw32-libpng-1.4.3-3.fc15 (2011-8874)
Fix for CVE-2011-2501. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for mingw32-libpng FEDORA-2011-8874
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mingw32-libpng FEDORA-2011-8868
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for mingw32-libpng FEDORA-2011-8868
Check for the Version of mingw32-libpng OpenVAS Vulnerability Test Fedora Update for mingw32-libpng FEDORA-2011-8868 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Fedora Update for mingw32-libpng FEDORA-2011-8874
Check for the Version of mingw32-libpng OpenVAS Vulnerability Test Fedora Update for mingw32-libpng FEDORA-2011-8874 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Fedora 14 : mingw32-libpng-1.4.3-2.fc14 (2011-8868)
Fix for CVE-2011-2501. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
CVE-2011-2501
The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...
CVE-2011-2501
The CVE-2011-2501 issue in libpng is an off-by-one/ out-of-bounds read vulnerability in png_format_buffer (pngerror.c). A crafted PNG image can trigger a denial of service (application crash) by exploiting the error-message copy path. Affected branches include libpng 1.0.x before 1.0.55, 1.2.x be...
Microsoft Windows GDIplus PNG Chunk Processing Integer Overflow (MS09-062; CVE-2009-2501; CVE-2013-1331)
An integer overflow vulnerability exists in Microsoft Windows GDI+. The vulnerability is due to lack of input validation when Microsoft Windows GDI+ handles PNG files. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted PNG file. Successful...
CVE-2009-2501
Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and...
CVE-2008-2501
PHPhotoalbum 0.5 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and (2) pid parameter to displayimage.php. The issue is documented in CVE-2008-2501 and corroborated by NVD/CVE record...
CVE-2007-2501
CVE-2007-2501 is an eval-injection vulnerability affecting CodePress components (CodePress before 0.9.4), where user-supplied input used in an eval call can lead to remote code execution. The vulnerable element is specifically in codepress.html. Impact is remote arbitrary code execution with the ...
CVE-2006-2501
CVE-2006-2501 describes a cross-site scripting (XSS) vulnerability in multiple Sun web/server products (Sun ONE Web Server 6.0 SP9 and earlier; Sun Java System Web Server 6.1 SP4 and earlier; Sun ONE Application Server 7 Update 6 and earlier; Java System Application Server 7 2004Q2 Update 2 and e...
CVE-2004-2501
CVE-2004-2501 describes a stack-based buffer overflow in MailEnable’s IMAP service (Professional 1.52 and Enterprise 1.01 and earlier). The vulnerability arises from improper boundary/IMAP data handling, allowing an unauthenticated remote attacker to cause a crash or execute arbitrary code by sen...
CVE-2004-2501
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...
CVE-2005-2501
CVE-2005-2501 : A buffer overflow in Apple Mac OS X’s AppKit (handling of rich text, .rtf) could allow a remote attacker to execute arbitrary code on vulnerable systems. Affected: Mac OS X 10.3.9 and 10.4.2 (and apps using AppKit such as TextEdit). Root cause: overflow in AppKit’s RTF handling. I...
CVE-2004-2501
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...