3096 matches found
XV: Multiple vulnerabilities
Background XV is an interactive image manipulation program for the X Window System. Description Greg Roelofs has reported multiple input validation errors in XV image decoders. Tavis Ormandy of the Gentoo Linux Security Audit Team has reported insufficient validation in the PDS Planetary Data...
GLSA-200504-15 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-15 PHP: Multiple vulnerabilities An integer overflow and an unbound recursion were discovered in the processing of Image File Directory tags in PHP's EXIF module CAN-2005-1042, CAN-2005-1043. Furthermore, two infinite loops...
security flaw
Integer overflow in the TIFFFetchStripThing function in tifdirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overfl...
security flaw
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service crash or memory corruption via TIFF images that lead to incorrect malloc calls...
CVE-2005-1046
CVE-2005-1046 is a vulnerability in KDE’s kimgio library used by KDE 3.4.0 (kdelibs/kimgio). A buffer overflow when processing PCX images allows remote attackers to execute arbitrary code. Impact is remote code execution with network access and no user interaction per the CVSS data. The public do...
CVE-2005-1046
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file...
CVE-2005-1046: Undefined Security Weakness
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file...
security flaw
The TIFF decoder in ImageMagick before 6.0 allows remote attackers to cause a denial of service crash via a crafted TIFF file...
security flaw
Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file...
security flaw
ImageMagick before 6.0 allows remote attackers to cause a denial of service application crash via a TIFF image with an invalid tag...
CVE-2005-0686
Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background...
GLSA-200503-13 : mlterm: Integer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-13 mlterm: Integer overflow vulnerability mlterm is vulnerable to an integer overflow that can be triggered by specifying a large image file as a background. This only effects users that have compiled mlterm with the 'gtk'...
CVE-2005-0686: Undefined Security Weakness
Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background...
CVE-2005-0686
Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background...
CVE-2005-0633
The CVE-2005-0633 issue affects Trillian 3.0 and Trillian Pro 3.0. It is described as a buffer overflow that allows remote attackers to execute arbitrary code through a crafted PNG image file. The available sources consistently state remote code execution is possible due to the overflow, but do n...
CVE-2005-0633: Undefined Security Weakness
Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file...
CVE-2004-1725
The CVE-2004-1725 entry describes a stack-based buffer overflow in xvbmp.c within XV that allows remote attackers to execute arbitrary code via a crafted image file. Connected sources confirm the affected component is XV and specify xvbmp.c as the vulnerable module, with the vulnerability enablin...
CVE-2004-1726
The CVE-2004-1726 vulnerability affects XV, with multiple integer overflows in xviris.c, xvpcx.c, and xvpm.c that can be triggered by a crafted image file, causing a heap-based buffer overflow and remote code execution as described in multiple sources (NVD/SUSE/CVE records). The provided document...