2743 matches found
Mandrake Linux Security Advisory : qt3 (MDKSA-2004:085)
Chris Evans discovered a heap-based overflow in the QT library when handling 8-bit RLE encoded BMP files. This vulnerability could allow for the compromise of the account used to view or browse malicious BMP files. On subsequent investigation, it was also found that the handlers for XPM, GIF, and...
CESA-2004-004: qt
CESA-2004-004 - rev 3 http://scary.beasts.org/security/CESA-2004-004.txt qt 3.3.2 BMP parser heap overflow error ======================================= Programs: qt, and any programs which use qt to decode BMP files. For example, KDE including konqueror. Severity: Possible compromise of account...
RHEL 2.1 / 3 : qt (RHSA-2004:414)
Updated qt packages that fix security issues in several of the image decoders are now available. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. During a security audit, Chris Evans discovered a heap...
Qt - '.bmp' Parsing Bug Heap Overflow
/ heap overflow exploit for qt bmp parsing bug infamous42md AT hotpop DOT com shouts to mitakeet, MB, and peeps @hackaholic ok, pretty standard heap overflow here. we spill across our chunk and overwrite the boundary tag for next chunk. the only problems i had was finding a miserable jump slot to...
security flaw
Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...
XV 3.x - .BMP Parsing Local Buffer Overflow
XV 3.x - .BMP Parsing Local Buffer Overflow / xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align...
XV 3.x - '.BMP' Parsing Local Buffer Overflow
/ xv exploit for the bmp parsing buffer overflow infamous42md AT hotpop DOT com PEOPLE STOP EMAILING MY BUGTRAQ ADDRESS AND USE THIS ONE!! n00batlocalho.outernet gcc -Wall xvbmpslap.c n00batlocalho.outernet ./a.out Usage: ./a.out align n00batlocalho.outernet ./a.out 0xbffff388...
XV 3.x BMP Parsing Local Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ======================================== Qt BMP Parsing Bug Heap Overflow Exploit ======================================== / heap overflow exploit for qt bmp parsing bug infamous42md AT hotpop DOT com shouts to mitakeet, MB, and peeps...
qt -- image loader vulnerabilities
Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...
Multiple Internet Explorer vulnerabilities
Integer overflow on .BMP parsing, double free on GIF parsing, new ms-its: vulnerability variant...
CVE-2004-0566
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value...
CVE-2004-0566
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value...
CVE-2004-0566
CVE-2004-0566 describes a remote code execution vulnerability in Internet Explorer caused by an integer overflow in the BMP image handling (imgbmp.cxx). An attacker can exploit this by delivering a malicious BMP with a large bfOffBits value, potentially compromising the affected system when a use...
CVE-2004-0566: Undefined Security Weakness
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value...
DEBIAN-CVE-2004-0224
Multiple buffer overflows in 1 iso2022jp.c or 2 shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."...
CVE-2004-1922
Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service memory consumption via a small BMP file with has a large memory size...
[SECURITY] [DSA 464-1] New gdk-pixbuf packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 464-1 [email protected] http://www.debian.org/security/ Martin Schulze March 16th, 2004 http://www.debian.org/security/faq -...
DSA-464 gdk-pixbuf - broken image handling
Bulletin has no description...
MDKSA-2004:020 - Updated gdk-pixbuf packages fix BMP-handling vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gdk-pixbuf Advisory ID: MDKSA-2004:020 Date: March 10th, 2004 Affected versions: Corporate Server 2.1 Problem Description: A vulnerability in gdk-pixbuf versions before 0.20 exists that could allow ...