RealNetworks RealPlayer RTSP GIF Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious media file. The specific flaw exists in the...

QuickTime < 7.6.9 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.9. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of JP2 images may lead to an application crash or arbitrary code execution. CVE-2010-3787 - Uninitialized memory...

[SECURITY] Fedora 12 Update: gif2png-2.5.1-1202.fc12

The gif2png program converts files from the obsolescent Graphic Interchange Format to Portable Network Graphics. The conversion preserves all graphic information, including transparency, perfectly. The gif2png program can even recover data from corrupted GIFs. There exists a 'web2png' program in ...

CVE-2010-3795

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

Design/Logic Flaw

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

CVE-2010-3795

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

CVE-2010-3795

CVE-2010-3795 affects Apple QuickTime on Mac OS X 10.6.x (before 10.6.5). The vulnerability is an uninitialized memory access during GIF image data processing, which can allow a remote attacker to cause arbitrary code execution or a denial of service (application crash). According to the provided...

CVE-2010-4040

Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted image...

Memory corruption

Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted image...

CVE-2010-4040

Removed by vendor...

CVE-2010-4040

CVE-2010-4040 affects Google Chrome prior to 7.0.517.41. The vulnerability arises from improper handling of animated GIF images, enabling a remote attacker to trigger memory corruption which can lead to a denial of service and potentially other impacts. The available details describe memory corru...

CVE-2010-4040

Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted image...

CVE-2010-4040

Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted image...

Google Chrome < 7.0.517.41 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 7.0.517.41. Such versions are reportedly affected by multiple vulnerabilities : - It is possible to spam profiles via autofill / autocomplete. Issue 48225, 51727 - An unspecified crash exists relating to forms. Issue 48857 ...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6609)

The Mozilla Firefox browser was updated to version 3.5.4 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft....

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6617)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability

No description provided by source. Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shell upload vulnerabilty...

Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload

Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shell upload vulnerabilty caused by improperly checking the...

CVE-2010-1817

Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

Buffer overflow

Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...