CVE-2012-5006

CVE-2012-5006 affects Caminova DjVu Browser Plug-in, specifically the npdjvu.dll component. A heap-based buffer overflow in the plug-in allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a DJVU file. Affected versions include 6.1.4 Build 27351 and earlier than 6.1.4.279...

KLA10138 ACE vulnerability in DjVu Browser Plug-in

A buffer overflow was found in the DjVu Browser Plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed djvu file. Original advisories Changelog Exploitation Related products DjVu-Browser-Plug-In C...

PT-2012-5724

Name of the Vulnerable Software and Affected Versions Caminova DjVu Browser Plug-in versions 6.1.4 Build 27351 through 6.1.4.27992 Description The issue is related to a heap-based buffer overflow in the npdjvu.dll component. This can be triggered by remote attackers sending a crafted Sjbz chunk i...

CVE-2012-5006: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a djvu file...

IrfanView DjVu Plugin DjVu Image File Decompression Overflow

The version of the IrfanView DjVu plugin DjVu.dll was found to be less than 4.34. As such, it is reportedly affected by a heap-based buffer overflow vulnerability that can be triggered by tricking users into opening a .djvu file with a specially crafted DjVu image that is not properly handled...

IrfanView 4.33 - .DJVU Image Processing Heap Overflow

IrfanView 4.33 - .DJVU Image Processing Heap Overflow Application: IrfanView DJVU Image Processing Heap Overflow Version: The vulnerability is confirmed in version 4.33. Other versions may also be affected Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49176 PRL: 2012-23...

IrfanView 4.33 - '.DJVU' Image Processing Heap Overflow

Application: IrfanView DJVU Image Processing Heap Overflow Version: The vulnerability is confirmed in version 4.33. Other versions may also be affected Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49176 PRL: 2012-23 Author: Francis Provencher Protek Research Lab's...

MDVA-2011:010 : djvulibre

Various problems were discovered with the DJVULibre firefox browser-plugin: Browser plugin from dejavulibre is obsolete and was causing browser crashes when viewing DJVU content. This browser plugin is now disabled, mozilla-plugin-dejavu should now be used. Djvulibre crashed when converting DJVU...

[SECURITY] Fedora 14 Update: evince-2.32.0-3.fc14

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

DjVu - 'DjVu_ActiveX_MSOffice.dll' ActiveX Component Buffer Overflow (Metasploit)

$Id: djvuimageurl.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DjVu...

CVE-2008-4922

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

Buffer overflow

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

CVE-2008-4922

CVE-2008-4922 describes a buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll). An overly long string to the ImageURL() property (and possibly the Mode, Page, or Zoom properties) can allow remote code execution. The connected sources confirm the affecte...

CVE-2008-4922

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

CVE-2008-4922: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

DjVu 'DjVu_ActiveX_MSOffice.dll' ActiveX控件堆缓冲区溢出漏洞

BUGTRAQ ID: 31987 CNCAN ID：CNCAN-2008103102 DjVu是一款LizardTech公司提供的新一代图像格式化软件。 DjVu'DjVuActiveXMSOffice.dll' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题是控件对ImageURl方法的参数缺少充分边界条件检查，构建恶意的WEB页，诱使用户访问可触发此漏洞。 DjVu 3.0 目前没有解决方案提供： http://djvu.org/ http://www.sebug.net/exploit/4995/...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

No description provided by source. !-- DjVu ActiveX Control ImageURL Property Overflow From DjVu.org : "DjVu pronounced "d�j� vu" is a digital document format with advanced compression technology and high performance value. DjVu allows for the distribution on the Internet and on DVD of very high...

djvu-overflow.txt

Snoop Security Research committee -- // clac.exe var shellcode = unescape "%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" + "%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC0...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit =========================================================== Snoop Security Research committee -- input language=JavaScri...