Adobe Acrobat Reader U3D Texture BMP File Buffer Overflow (APSB11-03; CVE-2011-0599)

Adobe Acrobat and Reader products include a plugin to parse the U3D image files inside PDF documents. The Universal 3D format can link to external image files, for example in BMP format, that provide texture data for the 3D objects. BMP is an image file format used to store bitmap digital images....

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft...

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft...

Buffer overflow

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerabilit...

Adobe Acrobat Reader U3D Texture bmp RLE Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SuSE 10 Security Update : gimp (ZYPP Patch Number 6882)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...

SuSE 10 Security Update : gimp (ZYPP Patch Number 6880)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...

SuSE 11 Security Update : gimp (SAT Patch Number 2155)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. CVE-2009-1570 / CVE-2009-3909 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

ALPHA 2 Player Local Crash PoC

Exploit for windows platform in category dos / poc ============================== ALPHA 2 Player Local Crash PoC ============================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

SuSE 10 Security Update : libgdiplus (ZYPP Patch Number 7130)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - gdiploadtiffimage by processing specially crafted TIFF images - gdiploadjpegimageinternal by processing specially crafted JPEG images -...

openSUSE Security Update : libgdiplus0 (openSUSE-SU-2010:0665-1)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - 'gdiploadtiffimage' by processing specially crafted TIFF images - 'gdiploadjpegimageinternal' by processing specially crafted JPEG images -...

Microsoft Mspaint - '.bmp' Crash (PoC)

Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15034.zip...

Mandriva Update for libgdiplus MDVSA-2010:166 (libgdiplus)

Check for the Version of libgdiplus OpenVAS Vulnerability Test Mandriva Update for libgdiplus MDVSA-2010:166 libgdiplus Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for libgdiplus MDVSA-2010:166 (libgdiplus)

Check for the Version of libgdiplus OpenVAS Vulnerability Test Mandriva Update for libgdiplus MDVSA-2010:166 libgdiplus Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[ MDVSA-2010:166 ] libgdiplus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:166 http://www.mandriva.com/security/ Package : libgdiplus Date : August 31, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and...

CVE-2010-1526

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

Integer overflow

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

CVE-2010-1526

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

Software Index (Remote File Upload) Exploit

Exploit for php platform in category web applications =========================================== Software Index Remote File Upload Exploit =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Heap overflow

Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...