Mozilla Thunderbird < 1.0.2 Browser GIF Processing Overflow

The installed version of Thunderbird is affected by multiple vulnerabilities. A remote attacker could exploit these issues to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17605; scriptversion"1.22"; scriptcvsdate"Date: 2018/07/16 14:09:15";...

GIF heap overflow parsing Netscape extension 2 — Mozilla

An GIF processing error when parsing the obsolete Netscape extension 2 can lead to an exploitable heap overrun, allowing an attacker to run arbitrary code on the user's machine...

CVE-2001-1417

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...

CVE-2001-1417

CVE-2001-1417 affects AOL Instant Messenger (AIM) 4.7. An attacker can trigger a denial of service by sending a buddy icon GIF where the length/width values exceed the actual image data, causing the application to hang or crash. The available sources (NVD/CVE records) describe the impact as a DoS...

CVE-2001-1417: Undefined Security Weakness

AOL Instant Messenger AIM 4.7 allows remote attackers to cause a denial of service application hang or crash via a buddy icon GIF file whose length and width values are larger than the actual image data...

Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities (deprecated)

Binary data 2703.prm...

mozilla -- heap buffer overflow in GIF image processing

A Mozilla Foundation Security Advisory states: An sic GIF processing error when parsing the obsolete Netscape extension 2 can lead to an exploitable heap overrun, allowing an attacker to run arbitrary code on the user's machine...

CVE-2005-0230

Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files...

CVE-2005-0230

Technical details (affected products/versions/root cause/fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2005-0230: Undefined Security Weakness

Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files...

CVE-2004-0999

zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...

CVE-2004-0999

zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...

CVE-2004-0999

CVE-2004-0999 affects zgv, a graphics viewer for SVGAlib. The Debian advisories (DSA-608-1) describe a remote vulnerability where malicious multiple-image (animated) GIFs can cause a segmentation fault in zgv, effectively a denial of service. The issue is one of several in the Debian advisory; th...

CVE-2004-0999: Undefined Security Weakness

zgv 5.5.3 allows remote attackers to cause a denial of service application crash via segmentation fault via crafted multiple-image animated GIF images...

[SECURITY] [DSA 608-1] New zgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 608-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2004 http://www.debian.org/security/faq -...

Debian DSA-051-1 : netscape - unexpected javascript execution

Florian Wesch has discovered a problem reported to bugtraq with the way how Netscape handles comments in GIF files. The Netscape browser does not escape the GIF file comment in the image information page. This allows JavaScript execution in the 'about:' protocol and can for example be used to...

Debian DSA-542-1 : qt - unsanitised input

Several vulnerabilities were discovered in recent versions of Qt, a commonly used graphic widget set, used in KDE for example. The first problem allows an attacker to execute arbitrary code, while the other two only seem to pose a denial of service danger. The Common Vulnerabilities and Exposures...

CVE-2004-0693

The GIF parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692...

CVE-2002-1091

CVE-2002-1091 affects Netscape 6.2.3 and earlier and Mozilla 1.0.1, where a crafted GIF image with zero width can cause heap corruption and arbitrary code execution on remote systems. The connected documents corroborate the vulnerability across multiple advisories (NVD entry; Mandrake MDKSA advis...

CVE-2002-1371

CVE-2002-1371 affects Common Unix Printing System (CUPS) versions 1.1.14 to 1.1.17. The vulnerability stems from improper handling of zero-length GIF images in filters/image-gif.c, allowing a remote attacker to execute arbitrary code via modified chunk headers (e.g., nogif). Public advisories (De...