582 matches found
CVE-2008-5884
CVE-2008-5884 affects AyeView 2.20. The vulnerability arises in GIF image handling where processing a crafted GIF header can cause the application to crash, enabling a user‑assisted DoS. The NVD notes a CVSS v2 base score of 4.3 (Medium) with network attack vector, requiring medium complexity and...
CVE-2008-5884: Undefined Security Weakness
AyeView 2.20 allows user-assisted attackers to cause a denial of service application crash via a GIF file with a malformed header...
CVE-2008-5358
Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...
Memory corruption
Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...
CVE-2008-5358: Improper Restriction of Operations within the Bounds of a Memory Buffer
Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll...
Microsoft GDI+ GIF文件远程代码执行漏洞(MS08-052)
BUGTRAQ ID: 31020 CVE ID:CVE-2008-3013 CNCVE ID:CNCVE-20083013 Microsoft Windows是一款微软开发的操作系统。 Microsoft Windows GDI+子系统解析特殊构建的GIF文件存在问题,远程攻击者可以利用漏洞进行内存破坏,可导致以登录用户进程权限执行任意代码。 提供畸形的图形扩展扩展可触发可利用的内存破坏条件,构建特殊的GIF文件,诱使用户访问,可触发此漏洞。 Microsoft Works 8.0 Microsoft Windows XP Professional x64 Edition SP2...
Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability
Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...
CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
DEBIAN-CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
Spoofing
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
CVE-2008-3230
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-2934: Use of Uninitialized Resource
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer...
CVE-2008-3230: Improper Input Validation
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service application crash via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif...
CVE-2008-1373
Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...
Buffer overflow
Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...