CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

The CVE-2007-6697 entry concerns a buffer overflow in SDL_image prior to 1.2.7, specifically in the LWZReadByte function of IMG_gif.c. A crafted GIF could crash the application or potentially execute arbitrary code, aligning with the related CVE-2006-4484 class of GIF handling vulnerabilities in ...

openSUSE 10 Security Update : SDL_image (SDL_image-4956)

Specially crafted GIF files could crash the SDLimage library CVE-2006-4484. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update SDLimage-4956. The text description of this plugin is C SUSE LLC...

SDL_image无效GIF文件LWZ Minimum Code Size远程缓冲区溢出漏洞

BUGTRAQ ID: 27417 SDLImage是用于处理图形文件的开源函数库。 SDLImage在处理畸形格式的图形文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 SDLImage库没有正确地处理Table Based Image Data头中带有无效LWZ Minimum Code Size的图形文件。标准允许代码的最大大小为12位，但SDLimage没有执行检查，因此可能触发缓冲区溢出。以下是IMGgif.c文件的ReadImage函数中的漏洞代码： ... unsigned char c; ... if LWZReadBytesrc, TRUE...

SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

SDL_Image library buffer overflow

Buffer overflow on GIF parsing...

sdl_image -- buffer overflow vulnerabilities

Secunia reports: Two vulnerabilities have been reported in SDLimage, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library. A boundary error within the LWZReadByte function in IMGgif.c can be exploited to trigger the...

SDL_image 1.2.6 - Invalid '.GIF' File LWZ Minimum Code Size Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occurs when handling malformed GIF images. Attackers can leverage this issue to execu...

SDL_image 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow

SDLimage 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occur...

Debian Security Advisory DSA 1415-1 (tk8.4)

The remote host is missing an update to tk8.4 announced via advisory DSA 1415-1. OpenVAS Vulnerability Test $Id: deb14151.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1415-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 051-1 (netscape)

The remote host is missing an update to netscape announced via advisory DSA 051-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1117)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 542-1 (qt-copy)

The remote host is missing an update to qt-copy announced via advisory DSA 542-1. OpenVAS Vulnerability Test $Id: deb5421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 542-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 051-1 (netscape)

The remote host is missing an update to netscape announced via advisory DSA 051-1. OpenVAS Vulnerability Test $Id: deb0511.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 051-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1117-1 (libgd2)

The remote host is missing an update to libgd2 announced via advisory DSA 1117-1. It was discoverd that the GD graphics library performs insufficient checks of the validity of GIF images, which might lead to denial of service by tricking the application into an infinite loop. OpenVAS Vulnerabilit...

Mozilla Firefox畸形GIF文件拒绝服务漏洞

Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理GIF文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意GIF文件，诱使用户使用Firefox处理，可导致应用程序崩溃。 Mozilla Firefox 2.0 8 Mozilla Firefox 2.0 .9 Mozilla Firefox 2.0 .7 Mozilla Firefox 2.0 .6 Mozilla Firefox 2.0 .5 Mozilla Firefox 2.0 .4 Mozilla Firefox 2.0 .3 Mozilla Firefox...

CVE-2007-6650

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file...

Design/Logic Flaw

uploadimg.php in the Automatic Image Upload with Thumbnails imgUpload module 1.3.2 for PunBB only verifies the Content-type field of uploaded files, which allows remote attackers to upload and execute arbitrary content via a file with a 1 JPG, 2 GIF, or 3 PNG MIME type...