CVE-2013-3259

CVE-2013-3259 affects INMATRIX Zoom Player prior to 8.7 beta 11. It describes a stack-based buffer overflow caused by a large biClrUsed value in a BMP file, enabling remote arbitrary code execution. The cited sources (NVD, CVE lists) corroborate the vulnerability and impact but do not provide a p...

PT-2014-2668

Name of the Vulnerable Software and Affected Versions INMATRIX Zoom Player versions prior to 8.7 beta 11 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by using a large biClrUsed value in a BMP file. Recommendations...

CVE-2013-3259: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file...

PT-2014-2669

Name of the Vulnerable Software and Affected Versions INMATRIX Zoom Player versions prior to 8.7 beta 11 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file. Recommendations For versions prior to 8.7 beta 11,...

CVE-2013-3260: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file...

ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)

I saw the notice for this CVE today but there was no known published expoits so I figured I'd put together this quick POC. Note, all app modules for the tested version were compiled with safeSEH so my use of an OS module may require adjustment of the offsets. There also appears to be several bad...

CVE-2013-1953

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

CVE-2013-1953

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

Integer overflow

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

UBUNTU-CVE-2013-1953

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

CVE-2013-1953

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

CVE-2013-1953

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

CVE-2013-1953

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

CVE-2013-1953: Undefined Security Weakness

Integer underflow in the inputbmpreader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the header of a BMP file, which triggers a buffer overflow...

Chasys Draw IES BMP Buffer Overflow (CVE-2013-3928)

A buffer overflow vulnerability has been reported in Chasys Draw IES. The vulnerability is due to an image parsing input validation error in Chasys Draw IES when parsing a file in BMP format. A remote attacker could trigger this issue via a specially crafted BMP file. Successful exploitation will...

Chasys Draw IES Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow vulnerability found in Chasys Draw IES version 4.10.01. The vulnerability exists in the module fltBMP.dll, while parsing BMP files, where the ReadFile function is used to store user provided data on the stack in a insecure way. It results in...

Chasys Draw IES - Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Chasys Draw IES...

Chasys Draw IES Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Chasys Draw IES...

CVE-2013-3480

Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow...