CVE-2007-1942

FastStone Image Viewer 2.9 is affected by CVE-2007-1942 due to an integer overflow while processing BMP images. The vulnerability allows a context‑dependent attacker to cause a denial of service and potentially execute arbitrary code, as demonstrated by crafted BMPs wh3intof.bmp and wh4intof.bmp....

CVE-2007-1948

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

Hidden in the picture behind the secret-vulnerability warning-the black bar safety net

The image size is not the same, browse pictures when you can't see the slightest problem, whether you think its a picture of a seemingly ordinary BMP picture, but hidden mystery for? Want to Ferret out hidden in the picture behind the secret, then essay with the beginning today of the mysterious...

Ubuntu 4.10 : imagemagick vulnerabilities (USN-35-1)

Markus Meissner discovered several potential buffer overflows in some image decoding functions of ImageMagick. Decoding a malicious BMP or DIB image or AVI video might result in execution of arbitrary code with the user's privileges. Since imagemagick can be used in custom printing systems, this...

Fedora Core 3 : gdk-pixbuf-0.22.0-16.fc3 (2005-266)

David Costanzo found a bug in the way gdk-pixbuf processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against gdk-pixbuf. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name...

Fedora Core 3 : gtk2-2.4.14-3.fc3 (2005-268)

David Costanzo found a bug in the way GTK+ processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against GTK+. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-0891 to this...

Fedora Core 2 : gdk-pixbuf-0.22.0-12.fc2 (2005-265)

David Costanzo found a bug in the way gdk-pixbuf processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against gdk-pixbuf. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name...

Fedora Core 2 : gtk2-2.4.14-2.fc2 (2005-267)

David Costanzo found a bug in the way GTK+ processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against GTK+. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-0891 to this...

CVE-2005-0891

Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...

CVE-2005-0891

Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...

CVE-2005-0891

Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...

USN-108-1: GDK vulnerability

Matthias Clasen discovered a Denial of Service vulnerability in the BMP image module of gdk. Processing a specially crafted BMP image with an application using gdk-pixbuf caused an allocated memory block to be free'ed twice, leading to a crash of the application. However, it is believed that this...

Important: Red Hat Security Advisory: gtk2 security update

Updated gtk2 packages that fix a double free vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user interfaces for the X Window...

CVE-2005-0891

The CVE-2005-0891 issue is a double-free vulnerability in GTK+-related BMP handling (gdk-pixbuf/gtk2) that can crash applications (DoS). Public disclosures tie the flaw to BMP processing in GTK+ gdk-pixbuf, with Red Hat/CentOS advisories RHSA-2005:343 and RHSA-2005:344 and related Ubuntu/Fedora/N...

CVE-2005-0891

Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...

CVE-2004-0926

Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image...

CVE-2004-0817

Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file...

CVE-2004-0802

Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817...

CVE-2004-0926

Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image...

CVE-2004-0926

CVE-2004-0926 : A heap-based buffer overflow in Apple QuickTime’s BMP image decoding on Mac OS X 10.2.8–10.3.5 may allow remote code execution. The vulnerability is tied to QuickTime’s BMP handling; no remediation/patch information is provided in the supplied documents, and exploitation status is...