Apple Mac OS X JPEG2000 image handling buffer overflow

Overview Apple Mac OS X fails to properly handle JPEG2000 files. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple ImageIO is an image processing framework that was introduced in OS X 10.4 Tiger...

[SA22187] Mac OS X Security Update Fixes Multiple Vulnerabilities

TITLE: Mac OS X Security Update Fixes Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22187 VERIFY ADVISORY: http://secunia.com/advisories/22187/ CRITICAL: Highly critical IMPACT: Security Bypass, Spoofing, Exposure of sensitive information, Privilege escalation, DoS, System access WHERE: From...

CVE-2006-4391: Undefined Security Weakness

Buffer overflow in Apple ImageIO on Apple Mac OS X 10.4 through 10.4.7 allows remote attackers to execute arbitrary code via a malformed JPEG2000 image...

Mac OS X 10.4.x < 10.4.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.8. Mac OS X 10.4.8 contains several security fixes for the following programs : - CFNetwork - Flash Player - ImageIO - Kernel - LoginWindow - Preferences - QuickDraw Manager - SASL - WebCore - Workgroup Manager C Tenabl...

Apple Mac OS X Image RAW vulnerable to buffer overflow via specially crafted Canon RAW image

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description RAW image files provide access to image information directly from a camera's sensor prior to in-camera processing, retaining the...

CVE-2006-3501

Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Radiance image...

CVE-2006-3503

Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a malformed GIF image...

CVE-2006-3502

Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...

CVE-2006-3502

Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...

CVE-2006-3503

Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a malformed GIF image...

CVE-2006-3501

Apple Mac OS X 10.4.7 ImageIO contains an integer overflow in Radiance image handling that can crash or allow arbitrary code execution when viewed by a user. Affected component: ImageIO framework; impact ranges from denial of service (application crash) to possible code execution with user-assist...

CVE-2006-3501

Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Radiance image...

CVE-2006-3502

CVE-2006-3502 affects Apple Mac OS X 10.4.7’s ImageIO GIF handling. A crafted GIF can trigger a memory‑allocation failure, causing a crash and possibly arbitrary code execution. Affected component: ImageIO; vulnerability arises during GIF processing. Remediation: apply Apple Security Update 2006-...

CVE-2006-3503

CVE-2006-3503: Integer overflow in Apple Mac OS X ImageIO (reported for 10.4.7) allows user-assisted attackers to crash or potentially execute arbitrary code via a crafted GIF image. Affected: Mac OS X 10.4.7/ImageIO; vector involves malformed GIFs; impact includes denial of service and possible ...

CVE-2006-3502: Undefined Security Weakness

Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...

CVE-2006-3503: Undefined Security Weakness

Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a malformed GIF image...

CVE-2006-3501: Undefined Security Weakness

Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Radiance image...

Apple Mac OS X ImageIO contains undetected memory failure in GIF image handling

Overview The Apple Mac OS X ImageIO framework contains a memory allocation flaw that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to...

Apple Mac OS X ImageIO vulnerable to integer overflow via specially crafted GIF image

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to process...

Apple Mac OS X ImageIO vulnerable to integer overflow via specially crafted Radiance image

Overview The Apple Mac OS X ImageIO framework contains an integer overflow that may allow a remote attacker to execute arbitrary code on an affected system. Description Apple's ImageIO is an image processing framework that was introduced in Mac OS X 10.4 Tiger. It includes the ability to process...