3352 matches found
DSA-958-1 drupal - several
Bulletin has no description...
asp. net combat:upload avatar vulnerability gif trick!- Vulnerability warning-the black bar safety net
Many asp. net site upload UploadFile. aspx file No shield file extension Only the shield of the file header All modifications of the file header can directly upload the back door The code is as follows: GIF credits cheat ASP Trojan : Gif89a htmlbody Horse /body/html...
Ubuntu 4.10 / 5.04 / 5.10 : libungif4 vulnerabilities (USN-214-1)
Chris Evans discovered several buffer overflows in the libungif library. By tricking an user or automated system into processing a specially crafted GIF image, this could be exploited to execute arbitrary code with the privileges of the application using libungif. Note that Tenable Network Securi...
Some of the so-called JPG or gif image web page Trojan horse-vulnerability warning-the black bar safety net
Some so-called gif images web Trojan Related web page often so make html body iframe src=http://x.x.x.x/1.htm width=0 height=0/iframe img src=http://y. y. y. y/images/logo. gif/img /body /html 把 上面 代码 保存 成 mm.htm and then put online. Of course, 如果你把这个mm.htm改名成mm.jpg, and then use another page to...
Mandrake Linux Security Advisory : libungif (MDKSA-2005:207)
Several bugs have been discovered in the way libungif decodes GIF images. These allow an attacker to create a carefully crafted GIF image file in such a way that it could cause applications linked with libungif to crash or execute arbitrary code when the file is opened by the user. The updated...
CVE-2005-3713
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block...
CVE-2005-3713
Apple QuickTime before 7.0.4 is affected by a heap-based buffer overflow triggered by a crafted GIF image containing a Netscape Navigator Application Extension Block. The overflow modifies the heap in the Picture Modifier block and can allow remote attackers to execute arbitrary code. Vendors doc...
Apple QuickTime fails to properly handle corrupt GIF images
Overview Apple's QuickTime is a player for files and streaming media in a variety of different formats. A flaw in QuickTime's handling of files in the Graphics Interchange Format GIF could allow a remote attacker to execute arbitrary code on a vulnerable system. Description A heap overflow exists...
CVE-2005-3713
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block...
CVE-2005-4426
Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could b...
CVE-2005-4426
Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could b...
CVE-2005-4426
CVE-2005-4426 involves YaBB before 2.1 where an interpretation conflict allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF extension, causing the HTML to execute in Internet Explorer (as described for CVE-2005-3312). The issue is tied to YaBB’s ...
CVE-2005-3975
Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...
CVE-2005-3975
Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...
eFiction 2.0 - Fake .GIF Arbitrary File Upload
eFiction 2.0 - Fake .GIF Arbitrary File Upload eFiction body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF !important input background-color: 303030 !important option background-c...
DSA-890-1 libungif4 - several
Bulletin has no description...
USN-214-1: libungif vulnerabilities
Chris Evans discovered several buffer overflows in the libungif library. By tricking an user or automated system into processing a specially crafted GIF image, this could be exploited to execute arbitrary code with the privileges of the application using libungif...
CVE-2005-2974
libungif library before 4.1.0 allows attackers to cause a denial of service via a crafted GIF file that triggers a null dereference...