CVE-2013-3480

CVE-2013-3480 affects Sagelight 4.4 and earlier. The vulnerability is an integer overflow triggered by crafted width and height values in a BMP file, which leads to a heap-based buffer overflow. The description indicates this can enable remote code execution, but the connected sources do not prov...

CVE-2013-3480

Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow...

PT-2013-4427

Name of the Vulnerable Software and Affected Versions Sagelight versions 4.4 and earlier Description The issue is related to an integer overflow that allows remote attackers to execute arbitrary code. This is achieved by crafting specific width and height dimensions in a BMP file, which in turn...

CVE-2013-3480: Undefined Security Weakness

Integer overflow in Sagelight 4.4 and earlier allows remote attackers to execute arbitrary code via crafted width and height dimensions in a BMP file, which triggers a heap-based buffer overflow...

Chasys Draw IES Buffer Overflow

This module exploits a buffer overflow vulnerability found in Chasys Draw IES version 4.10.01. The vulnerability exists in the module fltBMP.dll, while parsing BMP files, where the ReadFile function is used to store user provided data on the stack in an insecure way. It results in arbitrary code...

Fedora 18 : autotrace-0.31.1-34.fc18 (2013-12032)

This is an update that fixes possible buffer overflow when parsing BMP files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Adobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption Vulnerability

Exploit for windows platform in category local exploits ''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requiremen...

Adobe Reader X 10.1.4.38 - .BMP.RLE Heap Corruption

Adobe Reader X 10.1.4.38 - .BMP.RLE Heap Corruption ''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requirements...

autotrace buffer overflow

Buffer overflow on BMP processing...

[ MDVSA-2013:190 ] autotrace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:190 http://www.mandriva.com/en/support/security/ Package : autotrace Date : July 2, 2013 Affected: Business Server 1.0 Problem Description: Updated autotrace package fixes security vulnerability: Stack-based...

Adobe Reader X 10.1.4.38 BMP/RLE Heap Corruption

''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requirements ----------------------------------------- Default...

Adobe Reader X 10.1.4.38 - '.BMP'/'.RLE' Heap Corruption

''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requirements ----------------------------------------- Default...

Updated autotrace package fixes security vulnerability

Stack-based buffer overflow in bmp parser CVE-2013-1953. Updated autotrace package corrects the issue...

MGASA-2013-0195 Updated autotrace package fixes security vulnerability

Stack-based buffer overflow in bmp parser CVE-2013-1953. Updated autotrace package corrects the issue...

Sketchup multiple security vulnerabilities

Vulnerabilities on SKP, BMP, PICT parsing...

Multiple vulnerabilities on sketchup

SketchUp is a 3D modeling program marketed by Trimble Navigation Limitedpreviously Google and designed for architectural, civil, and mechanical engineers as well as filmmakers, game developers, and related professions. SketchUp fails to validate the input when parsing different types of embedded...

Adobe Acrobat Reader Crafted RLE8 format BMP File Buffer Overflow (APSB13-15; CVE-2013-2729)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to a buffer overflow while loading specially crafted BMP image resources from a PDF file. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with ...

Adobe Reader BMP/RLE heap corruption - CVE-2013-2729

Adobe Reader X is a powerful software solution developed by Adobe Systems to view, create, manipulate, print and manage files in Portable Document Format PDF. Since version 10 it includes the Protected Mode, a sandbox technology similar to the one in Google Chrome which improves the overall...

Google Picasa < 3.9 Build 136.17 Multiple Vulnerabilities

The version of Google Picasa running on the remote host is earlier than 3.9 Build 136.17. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the...

Google Picasa < 3.9 Build 3.9.14.34 Multiple Vulnerabilities (Mac OS X)

The installed version of Google Picasa is earlier than 3.9 Build 3.9.14.34. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the use of a...