Microsoft Windows Kernel - Bitmap Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=686 The attached Proof-of-Concept crashes Windows 7 with special pool enabled on win32k.sys. The crashes are triggering in multiple different ways two examples attached. Proof of Concept:...

Memory Corruption Vulnerability in PhotoLine's Handling of GIF Images

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the GIF format, which can be exploited by an attacker to construct malformed BMP files that can crash the program and cause a denial of service condition...

Memory Corruption Vulnerability in PhotoLine's Processing of BMP Images

PhotoLine is a professional image editing software from Germany. The software suffers from a memory corruption vulnerability when dealing with the BMP format, which can be exploited by an attacker to construct malformed BMP files that can crash the program and cause a denial of service condition...

PhotoLab Processing BMP Image Memory Corruption Vulnerability

PhotoLab is a Image Processing software developed by SELTECO Corporation company. A memory corruption vulnerability exists in the processing of BMP images. Allowing an attacker to exploit this vulnerability to construct a malformed BMP image could cause the program to crash...

PictBear Buffer Overflow Vulnerability

PictBear is image processing software for general users, known as the simple version of PHOTOSHOP. A buffer overflow vulnerability exists in the impBmp.ppi module of the software, which allows an attacker to exploit the vulnerability to construct a malformed BMP image that can lead to flooding of...

Microsoft Windows OleLoadPicture Bitmap Heap Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Nitro Pro Handles BMP Image Memory Corruption Vulnerability

Nitro pro is a PDF production and management software. Nitro pro software has a memory corruption vulnerability in the handling of BMP images. Allowing an attacker to exploit this vulnerability by constructing malformed BMP images can cause the program to crash...

The vulnerabilities of the Autodesk Design Review software for applying electronic annotations allow a hacker to execute arbitrary code.

The multiple vulnerabilities of the Autodesk Design Review software for applying electronic annotations are caused by buffer overflows. Exploitation of these vulnerabilities could allow an attacker to execute arbitrary code remotely, using specially crafted RLE-encoded data in BMP and FLI files,...

The vulnerability of the Autodesk Design Review software for applying electronic annotations allows a hacker to execute arbitrary code.

The vulnerability of the Autodesk Design Review software for applying electronic annotations is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, using a specially crafted value of biClrUsed in the BMP file, which causes th...

In-depth analysis of Microsoft Office RTF file stack overflow vulnerability, CVE-2 0 1 6-0 0 1 0-a vulnerability warning-the black bar safety net

0×0 1 Summary In this month's Microsoft patch Tuesday, Microsoft fixes 3 Office vulnerability MS16-0 0 4。 This vulnerability is due to MS Office not correctly parse the RTF document caused by a heap overflow vulnerability successful exploitation of this vulnerability may enable an attacker to...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges by using a special application known as “Microsoft Windows Kernel Bitmap Handling Use After Fre...

DEBIAN-CVE-2015-8668

Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image...

Picture Window Pro Handles BMP Images Multiple Memory Corruption Vulnerabilities

Picture Window Pro is an image processing software. Multiple memory corruption vulnerabilities exist in the tool's handling of the BMP format, which can be exploited by attackers to construct malformed BMP images and crash the program. Successful exploitation could lead to arbitrary code executio...

ABViewer Handles BMP Image Memory Corruption Vulnerability

ABViewer is a multifunctional design and engineering document management tool that suffers from a memory corruption vulnerability when dealing with BMPs, and constructing malformed BMP images can cause the program to crash...

win32k Clipboard Bitmap - Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=533 This PoC triggers a crash on Windows 7 32-bit with Special Pool enabled on win32k.sys. The kernel crashes due to a use-after-free condition with bitmaps in the clipboard. --- Note that multiple PoC executions and...

win32k Clipboard Bitmap - Use-After-Free

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=533 This PoC triggers a crash on Windows 7 32-bit with Special Pool enabled on win32k.sys. The kernel crashes due to a use-after-free condition with bitmaps in the...

win32k Clipboard Bitmap - Use-After-Free

win32k Clipboard Bitmap - Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=533 This PoC triggers a crash on Windows 7 32-bit with Special Pool enabled on win32k.sys. The kernel crashes due to a use-after-free condition with bitmaps in the clipboard. ---...

Samsung Galaxy S6 Samsung Gallery - Bitmap Decoding Crash

Samsung Galaxy S6 Samsung Gallery - Bitmap Decoding Crash. CVE-2015-7895. Dos exploit for android platform Source: https://code.google.com/p/google-security-research/issues/detail?id=497 Loading the bitmap bmpmemset.bmp can cause a crash due to a memset writing out of bounds. I/DEBUG 2961: pid:...

Autodesk Design Review BMP biClrUsed Remote Code Execution Vulnerability

Autodesk Design Review is free DWF viewer software. Autodesk Design Review suffers from a security vulnerability in the handling of BMP files due to an integer overflow test failure when multiplying the biClrUsed value by four. An attacker could exploit this vulnerability to execute arbitrary cod...

Autodesk Design Review BMP RLE Remote Code Execution Vulnerability

Autodesk Design Review is free DWF viewer software. A security vulnerability exists in Autodesk Design Review's handling of BMP files due to a failure to ensure that run-length encoded data is written outside of an allocated buffer. An attacker could exploit this vulnerability to execute arbitrar...