CVE-2005-4426

Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could b...

CVE-2005-4426

Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could b...

CVE-2005-4426

CVE-2005-4426 involves YaBB before 2.1 where an interpretation conflict allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF extension, causing the HTML to execute in Internet Explorer (as described for CVE-2005-3312). The issue is tied to YaBB’s ...

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-3350

libungif library before 4.1.0 allows attackers to corrupt memory and possibly execute arbitrary code via a crafted GIF file that leads to an out-of-bounds write...

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-2974: Undefined Security Weakness

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-2974

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-3350

CVE-2005-3350 is a vulnerability in the giflib/libungif GIF decoder (libungif before 4.1.0) that can lead to an out-of-bounds write and memory corruption when processing a crafted GIF file. Multiple connected sources confirm two CVEs associated with this issue: CVE-2005-2974 and CVE-2005-3350, wi...

giflib/libunfig: NULL pointer dereference crash

libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...

CVE-2005-2747

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

CVE-2005-2747

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

CVE-2005-2747

CVE-2005-2747 is a buffer overflow in the Apple Mac OS X ImageIO framework (OS X 10.4.2) used by WebCore and Safari. The vulnerability occurs in how GIF images are processed, allowing a remote attacker to execute arbitrary code. Affected components include ImageIO within OS X 10.4.x; the issue co...

CVE-2005-2747: Undefined Security Weakness

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

AOL Instant Messenged integer overflow

Integer overflow on signed type during buffy icon GIF file parsing...

CVE-2005-0562: Undefined Security Weakness

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary code via a GIF image with an improper height and width...

CVE-2001-1417

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...

CVE-2001-1417

CVE-2001-1417 affects AOL Instant Messenger (AIM) 4.7. An attacker can trigger a denial of service by sending a buddy icon GIF where the length/width values exceed the actual image data, causing the application to hang or crash. The available sources (NVD/CVE records) describe the impact as a DoS...

CVE-2001-1417: Undefined Security Weakness

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...

Debian DSA-051-1 : netscape - unexpected javascript execution

Florian Wesch has discovered a problem reported to bugtraq with the way how Netscape handles comments in GIF files. The Netscape browser does not escape the GIF file comment in the image information page. This allows JavaScript execution in the 'about:' protocol and can for example be used to...