CVE-2006-1983

CVE-2006-1983 describes multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier, exploitable via ImageIO/AppKit: a TIFF PredictorVSetField issue and a GIF CFAllocatorAllocate issue. A related issue, CVE-2006-2238, is a separate heap-based overflow in Apple QuickTime BMP processing (Re...

CVE-2006-1982

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images. The connected sources (including PRION page) confirm the root cause and impact description; no details on ...

CVE-2006-1983

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 PredictorVSetField function for TIFF or 2 CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit...

CVE-2006-1982: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images...

CVE-2006-1983: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 PredictorVSetField function for TIFF or 2 CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit...

CVE-2006-1984: Undefined Security Weakness

Unspecified vulnerability in the cgTIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers a null dereference...

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

CVE-2006-1552 describes an integer overflow in ImageIO used by Apple Mac OS X 10.4 up to 10.4.5. A crafted JPEG image with malformed metadata can remotely cause a denial of service (crash) via Safari (aka Deja-Doom). The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low...

CVE-2006-1552: Undefined Security Weakness

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2005-2747

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

CVE-2005-2747

CVE-2005-2747 is a buffer overflow in the Apple Mac OS X ImageIO framework (OS X 10.4.2) used by WebCore and Safari. The vulnerability occurs in how GIF images are processed, allowing a remote attacker to execute arbitrary code. Affected components include ImageIO within OS X 10.4.x; the issue co...

CVE-2005-2747

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

CVE-2005-2747: Undefined Security Weakness

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

Apple Mac OS X ImageIO fails to properly handle corrupt GIF files

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code. Description Apple ImageIO is an image processing framework that was introduced in OS X 10.4 Tiger. ImageIO is used by several applications, including WebCore and...

Multiple MacOS X vulnerabilites

ImageIO GIF files parsing buffer overflow, Mail.app information leakage, QuickDraw Manager PICT files parsing buffer overflow, Java virtual machine quick time extensions safe mode protection bypass, Safari crossite scripting...

Mac OS X Multiple Vulnerabilities (Security Update 2005-008)

The remote host is running Apple Mac OS X, but lacks Security Update 2005-008. This security update contains fixes for the following applications : - ImageIO - LibSystem - Mail - QuickDraw - Ruby - SecurityAgent - securityd C Tenable Network Security, Inc. include"compat.inc"; if description...