515 matches found
Mozilla Firefox 3.0.x - Large .GIF File Background Denial of Service
Mozilla Firefox 3.0.x - Large .GIF File Background Denial of Service source: https://www.securityfocus.com/bid/35280/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service...
Mandriva Linux Security Advisory : cups (MDVSA-2008:081)
A heap-based buffer overflow in CUPS 1.2.x and later was discovered by regenrecht of VeriSign iDenfense that could allow a remote attacker to execute arbitrary code via a crafted CGI search expression CVE-2008-0047. A validation error in the Hp-GL/2 filter was also discovered CVE-2008-0053...
Mandriva Update for cups MDVSA-2008:081 (cups)
Check for the Version of cups OpenVAS Vulnerability Test Mandriva Update for cups MDVSA-2008:081 cups Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Bypass getimagesize()function defect-vulnerability warning-the black bar safety net
By: the superhei A lot of php code using getimagesizeto determine if your Upload file is not image, a lot of people in the Black-Box testing will be used in the php code before adding a GIF89a to bypass such code: ifgetimagesize$file print yes; else print No.; But there are many cases there are...
Design/Logic Flaw
AyeView 2.20 allows user-assisted attackers to cause a denial of service application crash via a GIF file with a malformed header...
CVE-2008-5884
CVE-2008-5884 affects AyeView 2.20. The vulnerability arises in GIF image handling where processing a crafted GIF header can cause the application to crash, enabling a user‑assisted DoS. The NVD notes a CVSS v2 base score of 4.3 (Medium) with network attack vector, requiring medium complexity and...
Memory corruption
Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...
CVE-2008-5358
Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...
Microsoft GDI+ GIF文件远程代码执行漏洞（MS08-052）
BUGTRAQ ID: 31020 CVE ID：CVE-2008-3013 CNCVE ID：CNCVE-20083013 Microsoft Windows是一款微软开发的操作系统。 Microsoft Windows GDI+子系统解析特殊构建的GIF文件存在问题，远程攻击者可以利用漏洞进行内存破坏，可导致以登录用户进程权限执行任意代码。 提供畸形的图形扩展扩展可触发可利用的内存破坏条件，构建特殊的GIF文件，诱使用户访问，可触发此漏洞。 Microsoft Works 8.0 Microsoft Windows XP Professional x64 Edition SP2...
Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...
CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
Spoofing
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
DEBIAN-CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...