CVE-2012-1197

CVE-2012-1197 affects ACDSee 14.1 Build 137 where an integer overflow in the IDE_ACDStd.apl module can be triggered by crafted BMP image dimension values, causing a heap-based buffer overflow and enabling remote code execution. Public references corroborate the flaw as a memory corruption issue l...

FreeBSD : OpenTTD -- Multiple buffer overflows in validation of external data (9bad5ab1-f3f6-11e0-8b5c-b482fe3f522d)

The OpenTTD Team reports : Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file. %NASLMINLEVEL 70300 C Tenable Network Security,...

Adobe Reader Image Texture BMP File Memory Corruption (APSB11-24; CVE-2011-2438; CVE-2011-4372)

A remote code execution vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupt BMP resource. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious PDF...

CVE-2011-3343

Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file...

CVE-2011-3343

Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file...

Buffer overflow

Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file...

CVE-2011-3343

OpenTTD prior to 1.1.3 is affected by CVE-2011-3343 due to multiple buffer overflows in BMP handling (RLE-compressed BMPs or crafted BMP dimensions). This can cause a daemon crash or potential privilege gain when a local user processes a malicious BMP file. Remediation is to upgrade to OpenTTD 1....

CVE-2011-3343

Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file...

OpenTTD -- Multiple buffer overflows in validation of external data

The OpenTTD Team reports: Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service daemon crash or possibly gain privileges via 1 a crafted BMP file with RLE compression or 2 crafted dimensions in a BMP file...

ALPHA 2 Player Local Crash PoC

Exploit for windows platform in category dos / poc ============================== ALPHA 2 Player Local Crash PoC ============================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Microsoft Mspaint - '.bmp' Crash (PoC)

Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15034.zip...

CVE-2010-1526

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

Mandriva Security Advisory MDVSA-2009:296-1 (gimp)

The remote host is missing an update to gimp announced via advisory MDVSA-2009:296-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:296-1 (gimp)

The remote host is missing an update to gimp announced via advisory MDVSA-2009:296-1. OpenVAS Vulnerability Test $Id: mdksa20092961.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:296-1 gimp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Integer overflow

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow...

CVE-2009-1570

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow...

CVE-2009-1570

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow...

CVE-2009-1570

CVE-2009-1570 is a heap-based overflow in GIMP’s BMP/PCX/PSP plug-ins (notably ReadImage in bmp-read.c) triggered by crafted BMP width/height values, leading to potential arbitrary code execution. Public advisories (RHSA-2011:0837/0838 and related Oracle Linux advisories) describe an integer over...

CVE-2009-1570

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow...

CVE-2009-1570

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow...