Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1794, CVE-2014-1797,...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1797,...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794,...

CVE-2014-2763

Microsoft Internet Explorer 10 and 11 are affected by CVE-2014-2763 (and related IE memory corruption flaws). A crafted web site can cause memory corruption that may allow remote code execution or a denial of service. The vulnerability is documented as a memory corruption issue in IE 10/11, with ...

Debian DSA-2763-1 : pyopenssl - hostname check bypassing

It was discovered that PyOpenSSL, a Python wrapper around the OpenSSL library, does not properly handle certificates with NULL characters in the Subject Alternative Name field. A remote attacker in the position to obtain a certificate for 'www.foo.org\0.example.com' from a CA that a SSL client...

CVE-2013-2763

Summary (CVE-2013-2763) : The Schneider Electric M340 PLC modules are reported to be susceptible to a remote denial-of-service (resource consumption) via unspecified vectors. The vendor disputes the issue, stating it could not be duplicated and that the observed behavior could not remotely deny P...

GLSA-201209-23 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-23 GIMP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

Gimp Script-Fu Server Buffer Overflow (CVE-2012-2763)

A buffer overflow vulnerability has been reported in the Script-Fu scheme interpreter server component of GIMP...

CVE-2012-2763

Buffer overflow in the readstrupto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server...

CVE-2012-2763

CVE-2012-2763 describes a buffer overflow in GIMP’s Script-Fu server: readstr_upto in tinyscheme/scheme.c within plug-ins/script-fu, affecting GIMP 2.6.12 and earlier (and possibly 2.6.13). A long string in a command to the script-fu server can enable remote code execution. Public advisories acro...

GIMP Script-Fu Server Buffer Overflow

Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...

GIMP Script-Fu Server Buffer Overflow

Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...

GIMP Script-Fu Server Buffer Overflow

Added: 06/11/2012 CVE: CVE-2012-2763 BID: 53741 OSVDB: 82429 Background The GNU Image Manipulation Program GIMP is free software for tasks such as photo retouching, image composition, and image authoring. Problem The vulnerability is due improper boundary checking within the Script-Fu server...

GIMP script-fu Server Buffer Overflow (metasploit)

Exploit for windows platform in category remote exploits Original: http://1337day.com/exploits/18396 This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of us...

CVE-2012-2763

creationtimestamp| type| source ---|---|--- 2012-06-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18973 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/gimpscriptfu.rb 2025-02-06 03:13:40+00:00| seen|...

GIMP 2.6 script-fu < 2.8.0 Buffer Overflow Vulnerability

No description provided by source. There is a buffer overflow in the script-fu server component of GIMP the GNU Image Manipulation Program in all 2.6 versions Windows and Linux versions affecting both the script-fu console and the script-fu network server. A crafted msg to the script-fu server...

GIMP 2.6 script-fu 2.8.0 - Buffer Overflow (PoC)

GIMP 2.6 script-fu 2.8.0 - Buffer Overflow PoC / There is a buffer overflow in the script-fu server component of GIMP the GNU Image Manipulation Program in all 2.6 versions Windows and Linux versions affecting both the script-fu console and the script-fu network server. A crafted msg to the...

GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)

/ There is a buffer overflow in the script-fu server component of GIMP the GNU Image Manipulation Program in all 2.6 versions Windows and Linux versions affecting both the script-fu console and the script-fu network server. A crafted msg to the script-fu server overflows a buffer and overwrites...

CVE-2011-2763

The web interface on the LifeSize Room appliance LSRM13.5.3 11 and 4.7.18 allows remote attackers to execute arbitrary commands via a modified request to the LSRoomRemoting.doCommand function in gateway.php...

CVE-2011-2763

The CVE concerns LifeSize Room appliances LS_RM1_3.5.3 (11) and 4.7.18 where the web interface exposes LSRoom_Remoting.doCommand in gateway.php. A remote attacker can craft a request to that endpoint to execute arbitrary OS commands, enabling remote code execution on affected devices. Public reco...