GStreamer gst-plugins-good插件PNG图形处理整数溢出漏洞

BUGTRAQ ID: 35172 GStreamer是GNOME桌面环境下用来创建流媒体应用的多媒体框架。 GStreamer gst-plugins-good插件的ext/libpng/gstpngdec.c文件中存在可最终导致堆溢出的整数溢出漏洞。如果用户受骗打开了畸形的或过大的PNG文件的话，在计算输出缓冲区大小时就可能触发这个溢出，导致拒绝服务或执行任意指令。 GStreamer gst-plugins-good 0.10.15 GStreamer gst-plugins-good 0.10.12 GStreamer gst-plugins-good 0.10.11 厂商补丁：...

OpenJDK: PNG and GIF processing buffer overflow vulnerabilities (6804996, 6804997)

Multiple buffer overflows in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via 1 a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen,...

Microsoft GDIPlus PNG Infinite Loop Vulnerability

This host is running Windows XP Operating System with GDI libraries installed which is prone to Infinite Loop vulnerability. OpenVAS Vulnerability Test $Id: gbmsgdipluspnginfiniteloopvuln.nasl 7293 2017-09-27 08:49:48Z cfischer $ Microsoft GDIPlus PNG Infinite Loop Vulnerability Authors: Sujit...

Microsoft GDIPlus PNG Infinite Loop Vulnerability

Windows XP Operating System with GDI libraries installed is prone to Infinite Loop vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Design/Logic Flaw

GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service infinite loop via a PNG file that contains a certain large btChunkLen value...

CVE-2009-1511

GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service infinite loop via a PNG file that contains a certain large btChunkLen value...

CVE-2009-1511

GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service infinite loop via a PNG file that contains a certain large btChunkLen value...

CVE-2009-1511

This entry concerns CVE-2009-1511: a vulnerability in Microsoft GDI+ PNG parsing on Windows XP SP3 . The issue arises when processing a PNG image containing a specific large btChunkLen value, which can trigger an infinite loop in GDI+ and lead to a remote denial of service . The affected componen...

Ubuntu 8.10 : openjdk-6 vulnerabilities (USN-748-1)

It was discovered that font creation could leak temporary files. If a user were tricked into loading a malicious program or applet, a remote attacker could consume disk space, leading to a denial of service. CVE-2006-2426, CVE-2009-1100 It was discovered that the lightweight HttpServer did not...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : cups, cupsys vulnerabilities (USN-707-1)

It was discovered that CUPS didn't properly handle adding a large number of RSS subscriptions. A local user could exploit this and cause CUPS to crash, leading to a denial of service. This issue only applied to Ubuntu 7.10, 8.04 LTS and 8.10. CVE-2008-5183 It was discovered that CUPS did not...

FreeBSD : gd -- integer overflow (62239968-2f2a-11d9-a9e7-0001020eed82)

infamous41md reports about the GD Graphics Library : There is an integer overflow when allocating memory in the routine that handles loading PNG image files. This later leads to heap data structures being overwritten. If an attacker tricked a user into loading a malicious PNG image, they could...

SOL9988 - libpng vulnerability CVE-2009-0040

Description The PNG reference library libpng, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code by way of a crafted PNG file. Information about this advisory is available at the followin...

Microsoft GDI Plugin .png Infinite Loop Denial of Service PoC

No description provided by source. ! /usr/bin/perl CALgdiplugpoc.pl MircosoftgdiplugpnginfinityloopD.o.S POC by Code Audit Labs public 2009-04-17 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 other version should be affected CVE: please assign to a CVE number DESCRIPTI...

CUPS < 1.3.10 Multiple Vulnerabilities

According to its banner, the version of CUPS installed on the remote host is earlier than 1.3.10. Such versions are affected by several issues : - A potential integer overflow in the PNG image validation code in 'cupsImageReadPNG' could allow an attacker to crash the affected service or possibly...

Microsoft GDI Plugin - '.png' Infinite Loop Denial of Service (PoC)

!/usr/bin/perl CALgdiplugpoc.pl MircosoftgdiplugpnginfinityloopD.o.S POC by Code Audit Labs public 2009-04-17 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 other version should be affected CVE: please assign to a CVE number DESCRIPTION =========== The vulnerability...

Microsoft GDI+ Denial Of Service

! /usr/bin/perl CALgdiplugpoc.pl MircosoftgdiplugpnginfinityloopD.o.S POC by Code Audit Labs public 2009-04-17 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 other version should be affected CVE: please assign to a CVE number DESCRIPTION =========== The vulnerability...

Microsoft GDI Plugin .png Infinite Loop Denial of Service PoC

Exploit for unknown platform in category dos / poc ============================================================= Microsoft GDI Plugin .png Infinite Loop Denial of Service PoC ============================================================= ! /usr/bin/perl CALgdiplugpoc.pl...

Microsoft GDI Plugin - .png Infinite Loop Denial of Service (PoC)

Microsoft GDI Plugin - .png Infinite Loop Denial of Service PoC ! /usr/bin/perl CALgdiplugpoc.pl MircosoftgdiplugpnginfinityloopD.o.S POC by Code Audit Labs public 2009-04-17 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 other version should be affected CVE: please...

Mandriva Update for cairo MDVSA-2008:019 (cairo)

Check for the Version of cairo OpenVAS Vulnerability Test Mandriva Update for cairo MDVSA-2008:019 cairo Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for libwmf MDKSA-2007:123 (libwmf)

Check for the Version of libwmf OpenVAS Vulnerability Test Mandriva Update for libwmf MDKSA-2007:123 libwmf Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...