Windows Media Player 7.1 <= 10 - BMP Heap Overflow PoC (MS06-005) (2)

No description provided by source. sploit creater by [email protected] ms06-005 advisory proof of concept heap overflow in wmf.dll @ 0x0035920a denial of service, cuz we can't get this to play nice shamelessly stolen from CANVAS code def intelorderi: str= a=chri % 256 i=i 8 b=chri % 256 i...

IrfanView 3.99 Multiple BMP Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23318/info IrfanView is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers to crash the...

KLA10181 ACE vulnerability in Sketchup

Multiple critical vulnerabilities have been found in Google SketchUp. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via a specially designed BMP file; 2. The out of bounds wri...

IrfanView RLE Image Decompression Buffer Overflow Vulnerability

No description provided by source. Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...

FastStone Image Viewer 2.9/3.6 BMP Image Handling Memory Corruption

No description provided by source. source: http://www.securityfocus.com/bid/23312/info FastStone Image Viewer is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers to...

Adobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption

No description provided by source. ''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requirements...

Microsoft Mspaint bmp crash Proof Of Concept

No description provided by source. Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: http://www.exploit-db.com/sploits/15034.zip...

Cam2pc 4.6.2 - BMP Image Processing Integer Overflow Vulnerability

No description provided by source. Application: Cam2pc BMP Image Processing Integer Overflow Vulnerability Platforms: Windows Vendor : http://www.nabocorp.co Versions : The vulnerability is confirmed in version 4.6.2 Freeware Edition Other versions may also be affected. Date : 2013-03-13 Contact ...

ACDSee 9.0 Photo Manager Multiple BMP Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23317/info ACDSee 9.0 Photo Manager is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers ...

CVE-2013-3663

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP...

Heap overflow

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP...

CVE-2013-3663

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP...

CVE-2013-3663

SketchUp before 8 Maintenance 3 is affected by CVE-2013-3663 (BMP RLE8 Heap Overflow) due to a heap overflow in the BMP RLE8 decoding path borrowed from paintlib. The vulnerability allows remote code execution by parsing a crafted BMP texture embedded in a SKP file; the issue is fixed in 8M3 (and...

openSUSE Security Update : autotrace (openSUSE-SU-2013:1044-1)

This update of autotrace fixes a buffer overflow issue. - Fix stack-based buffer overflow in bmp parser CVE-2013-1953.patch, bnc815382, CVE-2013-1953. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : libgdiplus0 (openSUSE-SU-2010:0665-1)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - 'gdiploadtiffimage' by processing specially crafted TIFF images - 'gdiploadjpegimageinternal' by processing specially crafted JPEG images -...

Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044) - Ver2 (CVE-2008-3020)

BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...

Trimble Navigation SketchUp BMP File Code Execution - Ver2 (CVE-2013-3663)

A remote code execution vulnerability exists in Trimble Navigation's SketchUp. The vulnerability is due to a heap buffer overflow while processing BMP files which contain malicious RLE data. Remote unauthenticated attackers can exploit this vulnerability by enticing a target user to open a...

PT-2014-2023 · Mozjpeg +8 · Mozjpeg +8

Name of the Vulnerable Software and Affected Versions: libjpeg-turbo versions through 1.5.90 MozJPEG versions through 3.3.1 Description: The issue is related to a buffer over-read in the get 8bit row function in rdbmp.c of the libjpeg library. This can be exploited by a remote attacker to cause a...

CVE-2013-3928

Stack-based buffer overflow in the ReadFile function in fltBMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file...

Stack overflow

Stack-based buffer overflow in the ReadFile function in fltBMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file...