IcoFX 2.5.0.0 Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ IcoFX Buffer Overflow Vulnerability 1. Advisory Information Title: IcoFX Buffer Overflow Vulnerability Advisory ID: CORE-2013-1107 Advisory URL: http://www.coresecurity.com/advisories/icofx-buffer-overflow-vulnerability Date...

IcoFX Stack Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in version 2.1 of IcoFX. The vulnerability exists while parsing .ICO files, where a specially crafted ICONDIR header providing an arbitrary long number of images in the file can be used to trigger the overflow when reading the...

IcoFX Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-1107 1. Advisory Information Title: IcoFX Buffer Overflow Vulnerability Advisory ID: CORE-2013-1107 Date published: 2013-12-10 Date of last update: 2013-12-10 Vendors contacted: IcoFX Software Release mode: User release 2. Vulnerability Information Class: Buffer...

Oracle Linux 5 : ImageMagick (ELSA-2008-0145)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0145 advisory. - Add patch for CVE-2007-1797 235071 - Add patch for CVE-2007-4988 310081 - Add patch for CVE-2007-4985 310091 - Add patch for CVE-2007-4986 310121 - A...

XnView 1.99.1 - .JLS File Decompression Heap Overflow

XnView 1.99.1 - .JLS File Decompression Heap Overflow SUMMARY XnView Formats PlugIn is prone to an overflow condition. The JLS Plugin xjpegls.dll library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a...

XnView 1.99.1 - '.JLS' File Decompression Heap Overflow

SUMMARY XnView Formats PlugIn is prone to an overflow condition. The JLS Plugin xjpegls.dll library fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted JLS compressed image file, a context-dependent attacker could potentially execute...

Scientific Linux Security Update : ImageMagick on SL3.x, SL4.x, SL5.x i386/x86_64

Several heap-based buffer overflow flaws were found in ImageMagick. If a victim opened a specially crafted DCM or XWD file, an attacker could potentially execute arbitrary code on the victim's machine. CVE-2007-1797 Several denial of service flaws were found in ImageMagick's parsing of XCF and DC...

Fedora Update for trytond FEDORA-2012-4988

Check for the Version of trytond OpenVAS Vulnerability Test Fedora Update for trytond FEDORA-2012-4988 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2010-4988

CVE-2010-4988 describes a PHP remote file inclusion vulnerability in Family Connections Who is Chatting 2.2.3, specifically in mod_chatting/themes/default/header.php where TMPL[path] can be controlled to include remote PHP code. The underlying issue enables an attacker to execute arbitrary PHP vi...

cultbooking 2.0.4 - Multiple Vulnerabilities

cultbooking 2.0.4 - Multiple Vulnerabilities CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central api calle...

CVE-2009-4988

CVE-2009-4988 affects SAP Business One 2005 License Manager (NT Naming Service) for versions 6.80.123 and 6.80.320. The root cause is a stack-based buffer overflow in NT_Naming_Service.exe triggered by an excessively long GIOP request to TCP port 30000, allowing remote arbitrary-code execution. P...

KLA10312 ACE vulnerability in SAP Business One 2005

A buffer overflow was found in SAP Business One. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...

[SECURITY] [DSA 1903-1] New graphicsmagick packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1903 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 07, 2009 http://www.debian.org/security/faq -...

SAP Business One License Manager 2005 Buffer Overflow

This module exploits a stack buffer overflow in the SAP Business One 2005 License Manager 'NT Naming Service' A and B releases. By sending an excessively long string the stack is overwritten enabling arbitrary code execution. This module requires Metasploit: https://metasploit.com/download Curren...

Debian: Security Advisory (DSA-1858-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4988

creationtimestamp| type| source ---|---|--- 2009-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9319 2010-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16423 2018-05-29 15:50:33+00:00| seen|...

SeaMonkey < 1.1.16 XSL Transformation Overflow DoS

Binary data 4988.prm...

Mandriva Update for ImageMagick MDVSA-2008:035 (ImageMagick)

Check for the Version of ImageMagick OpenVAS Vulnerability Test Mandriva Update for ImageMagick MDVSA-2008:035 ImageMagick Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for ImageMagick CESA-2008:0145 centos3 i386

Check for the Version of ImageMagick OpenVAS Vulnerability Test CentOS Update for ImageMagick CESA-2008:0145 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for ImageMagick CESA-2008:0145 centos4 x86_64

Check for the Version of ImageMagick OpenVAS Vulnerability Test CentOS Update for ImageMagick CESA-2008:0145 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...