CVE-2006-3502

Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...

CVE-2006-3503

Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a malformed GIF image...

CVE-2006-3502

Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...

CVE-2006-3503

CVE-2006-3503: Integer overflow in Apple Mac OS X ImageIO (reported for 10.4.7) allows user-assisted attackers to crash or potentially execute arbitrary code via a crafted GIF image. Affected: Mac OS X 10.4.7/ImageIO; vector involves malformed GIFs; impact includes denial of service and possible ...

Apple Mac OS X ImageIO contains undetected memory failure in GIF image handling

Overview The Apple Mac OS X ImageIO framework contains a memory allocation flaw that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to...

Apple Mac OS X ImageIO vulnerable to integer overflow via specially crafted GIF image

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to process...

DSA-1117 libgd2 - insufficient input sanitising

Bulletin has no description...

CVE-2006-3555

Multiple cross-site scripting XSS vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to inject arbitrary web script or HTML by using editprofile.php to upload a 1 avatar or 2 forum image attachment that has a .gif or .jpg extension, and begins with a GIF header...

[VulnWatch] NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2006-04 Microsoft Office GIF Filter Buffer Overflow Vulnerability Release Date: 2006-07-12 CVE ID: CVE-2006-0007 http://www.nsfocus.com/english/homepage/research/0604.htm Affected systems & software =================== Microsoft Office 2000 Microsoft Office XP Microsof...

Buffer overflow

Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed...

CVE-2006-0007

Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed...

Microsoft Office Malformed GIF File Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability when handling a malformed GIF file. The issue occurs when an Office application such as Excel, Word, or PowerPoint tries to open a malformed GIF file. An attacker could exploit this vulnerability to corrupt memory and...

Microsoft Office fails to properly handle GIF images

Overview Microsoft Office applications fail to properly handle GIF images. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office applications fail to properly parse GIF images. When an Office document containing a malformed G...

Microsoft Security Bulletin MS06-039 Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (915384)

Microsoft Security Bulletin MS06-039 Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution 915384 Published: July 11, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office Impact of Vulnerability: Remote Code Execution Maximum Severity...

CentOS 3 / 4 : libungif (CESA-2005:828)

Updated libungif packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The libungif package contains a shared library of functions for loading and saving GIF format image files. Several bugs i...

Teach you to make hide better web page Trojan horse-vulnerability warning-the black bar safety net

Hello everyone. I'm David. Today make a tutorial,name it:teach you to make hide better web Trojan --------------------------------------------------------------------- Today, pumping up some time to make a several web page Trojan horse,the effect is not very good,mainly is the hidden poor,easy to...

libgd /libwmf graphics library infinite loop

Infinite loop in GIF data LZW decoding...

Mandrake Linux Security Advisory : tetex (MDKSA-2006:113)

Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly other versions. These overflows allow remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow ...

CVE-2006-3128

choosefile.php in easy-CMS 0.1.2, when modmime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories...

USN-298-1: libgd2 vulnerability

Xavier Roche discovered that libgd's function for reading GIF image data did not sufficiently verify its validity. Specially crafted GIF images could cause an infinite loop which used up all available CPU resources. Since libgd is often used in PHP and Perl web applications, this could lead to a...