FastStone Image Viewer 2.93.6 - .bmp Image Handling Memory Corruption

FastStone Image Viewer 2.93.6 - .bmp Image Handling Memory Corruption // source: https://www.securityfocus.com/bid/23312/info FastStone Image Viewer is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully...

FastStone Image Viewer 2.9/3.6 - '.bmp' Image Handling Memory Corruption

// source: https://www.securityfocus.com/bid/23312/info FastStone Image Viewer is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers to crash the affected application...

CVE-2007-1764

Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG image...

Stack overflow

Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG image...

CVE-2007-1764

CVE-2007-1764 affects FastStone Image Viewer 2.8, where a stack-based buffer overflow in JPEG parsing allows a user-assisted remote attacker to execute arbitrary code. The issue stems from parsing a crafted JPEG image, enabling arbitrary code execution on the affected system. Descriptions consist...

CVE-2007-1764

Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG image...

Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability

Dear Micha? Majchrowicz, This image also effectively exploits stack overflow in FastStone Image Viewer 2.8, EIP is 0x41414141. --Monday, March 26, 2007, 12:20:07 AM, you wrote to [email protected]: MM Everytime you try to turn on the slideshow with a JPG file in the MM folder you get BSoD...

Debian DSA-1068-1 : fbi - insecure temporary file

Jan Braun discovered that the fbgs script of fbi, an image viewer for the framebuffer environment, creates an directory in a predictable manner, which allows denial of service through symlink attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

fbi image viewer symbolic links problem

Symbolic links problem on directory creation...

DSA-1068-1 fbi - insecure temporary file

Bulletin has no description...

XV

New XV image viewer packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. Format string and other issues could cause a crash or execution of arbitrary code if a specially crafted image is loaded with XV. Here are the details from the Slackware 10.1...

Multiple xloadimage image viewer bugs

Buffer overflows, shell metacharacters problem...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

DSA-695-1 xli - buffer overflow, input sanitising, integer overflow

Bulletin has no description...

Debian DSA-694-1 : xloadimage - missing input sanitising, integer overflow

Several vulnerabilities have been discovered in xloadimage, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0638 Tavis Ormandy of the Gentoo Linux Security Audit Team has reported a flaw in the handling of compressed images,...

DSA-694-1 xloadimage - missing input sanitising, integer overflow

Bulletin has no description...

Debian DSA-695-1 : xli - buffer overflow, input sanitising, integer overflow

Several vulnerabilities have been discovered in xli, an image viewer for X11. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2001-0775 A buffer overflow in the decoder for FACES format images could be exploited by an attacker to execute arbitrary code...

DEBIAN-CVE-2005-0639

Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files...

DEBIAN-CVE-2005-0638

xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command...

iDEFENSE Security Advisory 12.13.04 - Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability

Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability iDEFENSE Security Advisory 12.13.04 http://www.idefense.com/application/poi/display?id=160&type=vulnerabilit ies December 13, 2004 I. BACKGROUND xzgv is a picture viewer for X, with a thumbnail-based file selector. It uses GTK+ and...