CVE-2008-1373: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...

CVE-2008-1373

Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...

CVE-2008-1373

Buffer overflow in the gifreadlzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large codesize value, a similar issue to CVE-2006-4484...

CVE-2008-1373

CVE-2008-1373 is a buffer overflow in the GIF filter (gif_read_lzw) of CUPS, allowing remote code execution via crafted GIF files. Debian's DSA-1625-1 lists CVE-2008-1373 among remote GIF filter issues and notes fixes in cupsys up to 1.2.7-4etch4 (etch) and cups 1.3.7-2 (lenny/sid). The vulnerabi...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : cupsys vulnerabilities (USN-598-1)

It was discovered that the CUPS administration interface contained a heap- based overflow flaw. A local attacker, and a remote attacker if printer sharing is enabled, could send a malicious request and possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In...

CUPS gif_read_lzw()函数GIF文件处理缓冲区溢出漏洞

BUGTRAQ ID: 28544 CVECAN ID: CVE-2008-1373 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理畸形格式的GIF文件时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 CUPS打印系统所使用的GIF解析代码直接从GIF图形中读取了codesize值，且没有经过验证便用于初始化gifreadlzw中的表格数组，这可能导致静态溢出。...

jshop-lfi.txt

JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "powered by jshop" and also usefull one...

JShop 1.x 2.x - xPage Local File Inclusion

JShop 1.x 2.x - xPage Local File Inclusion JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "power...

Design/Logic Flaw

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service crash via a crafted 1 bitmap BMP or 2 GIF file, a related issue to CVE-2008-0420...

CVE-2008-0894: Undefined Security Weakness

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service crash via a crafted 1 bitmap BMP or 2 GIF file, a related issue to CVE-2008-0420...

GLSA-200802-01 : SDL_image: Two buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200802-01 SDLimage: Two buffer overflow vulnerabilities The LWZReadByte function in file IMGgif.c and the IMGLoadLBMRW function in file IMGlbm.c each contain a boundary error that can be triggered to cause a static buffer overflow...

Buffer overflow

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

The CVE-2007-6697 entry concerns a buffer overflow in SDL_image prior to 1.2.7, specifically in the LWZReadByte function of IMG_gif.c. A crafted GIF could crash the application or potentially execute arbitrary code, aligning with the related CVE-2006-4484 class of GIF handling vulnerabilities in ...

SDL_image无效GIF文件LWZ Minimum Code Size远程缓冲区溢出漏洞

BUGTRAQ ID: 27417 SDLImage是用于处理图形文件的开源函数库。 SDLImage在处理畸形格式的图形文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 SDLImage库没有正确地处理Table Based Image Data头中带有无效LWZ Minimum Code Size的图形文件。标准允许代码的最大大小为12位，但SDLimage没有执行检查，因此可能触发缓冲区溢出。以下是IMGgif.c文件的ReadImage函数中的漏洞代码： ... unsigned char c; ... if LWZReadBytesrc, TRUE...

sdl_image -- buffer overflow vulnerabilities

Secunia reports: Two vulnerabilities have been reported in SDLimage, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library. A boundary error within the LWZReadByte function in IMGgif.c can be exploited to trigger the...