4203 matches found
CVE-2008-3520
Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...
CVE-2008-3520: Undefined Security Weakness
Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation...
Information disclosure
The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...
CVE-2007-5348
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite...
CVE-2008-2245: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System MSCMS in the Image Color Management ICM component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code...
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...
cups: integer overflow in the image filter
Multiple integer overflows in 1 filter/image-png.c and 2 filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service crash and trigger memory corruption, as demonstrated via a crafted PNG image...
Stack overflow
Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...
CVE-2008-2426
Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...
DEBIAN-CVE-2008-2426
Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...
CVE-2008-2426
Multiple stack-based buffer overflows in Imlib 2 aka imlib2 1.4.0 allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a PNM image with a crafted header, related to the load function in src/modules/loaders/loaderpnm.c; or 2 a crafted XPM...
Eudora Japanese version stops working after the application crashes
Overview Eudora is a mail client from QUALCOMM. The Eudora Japanese version sold by Livedoor contains a vulnerability to crash, caused by previewing an email that has a corrupt image attachment. Impact Eudora Japanese version stops functioning, once crashed by opening an email message containing ...
Heap overflow
Heap-based buffer overflow in the progressive PNG Image loader decoders/pngloader.cpp in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image...
CVE-2008-1670
Heap-based buffer overflow in the progressive PNG Image loader decoders/pngloader.cpp in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image...
CVE-2008-1670
Heap-based buffer overflow in the progressive PNG Image loader decoders/pngloader.cpp in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image...
CVE-2008-1670
Removed by vendor...
CVE-2008-1102
Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...
CVE-2007-6715
Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...