IrfanView 4.00 - '.iff' Local Buffer Overflow

/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

Buffer overflow

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

CVE-2007-1948

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

CVE-2007-1948

CVE-2007-1948 concerns IrfanView 3.99. A crafted BMP image can trigger a buffer overflow during parsing of RLE and non-RLE blocks (xoffset/yoffset commands), leading to a possible denial of service and potentially arbitrary code execution. The underlying cause is a vulnerability in BMP parsing wi...

CVE-2007-1948

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

irfanview399-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

IrfanView 3.99 .ANI File Local Buffer Overflow Exploit (multiple targets)

No description provided by source. / IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr...

IrfanView 3.99 - .ani Local Buffer Overflow (2)

IrfanView 3.99 - .ani Local Buffer Overflow 2 / IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible...

IrfanView 3.99 - '.ani' Local Buffer Overflow (2)

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

IrfanView 3.99 .ANI File Local Buffer Overflow Exploit (multiple targets)

Exploit for unknown platform in category local exploits ========================================================================= IrfanView 3.99 .ANI File Local Buffer Overflow Exploit multiple targets ========================================================================= / IrfanView 3.99 .ANI...

CVE-2007-1867

Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...

Buffer overflow

Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...

CVE-2007-1867

CVE-2007-1867 applies to IrfanView 3.99. A buffer overflow in the handling of animated cursor (ANI) files can be triggered by a crafted ANI, allowing remote attackers to execute arbitrary code. The vulnerability is described in both the initial CVE entry and connected records as a stack/heap over...

CVE-2007-1867

Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor ANI file...

IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities

IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/23318/info IrfanView is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issue...

IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/23318/info IrfanView is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers to crash the affected application. Due to the...

IrfanView 3.99 - .ani Local Buffer Overflow (1)

IrfanView 3.99 - .ani Local Buffer Overflow 1 / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Ha...

IrfanView 3.99 - '.ani' Local Buffer Overflow (1)

/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...

IrfanView 3.99 (.ANI File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== IrfanView 3.99 .ANI File Local Buffer Overflow Exploit ======================================================== / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a...

IrfanView 3.99 (.ANI File) Local Buffer Overflow Exploit

No description provided by source. / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Cod...