Microsoft Internet Explorer DoS

Browser hangs on malcrafted PNG image...

Microsoft IE畸形PNG文件远程拒绝服务漏洞

BUGTRAQ ID: 31215 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer中的Mshtml.dll库负责渲染网页中的对象。在加载畸形的PNG文件时，该库中的CDwnTaskExec::ThreadExec可能会陷入死循环，保持一直获取任务并同步运行，这样就无法完成任务。如果任务无法完成或超时的话，就会导致无法执行之后的任务。 Microsoft Internet Explorer 8.0.6001 Microsoft Internet Explorer 7.0.5730 Microsoft --------...

Design/Logic Flaw

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service failure of subsequent image rendering via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function...

CVE-2008-4127

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service failure of subsequent image rendering via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function...

CVE-2008-4127

CVE-2008-4127 affects Microsoft Internet Explorer (IE) on Windows XP SP2, specifically IE 7 Gold (7.0.5730) and IE 8 Beta (8.0.6001). The vulnerability arises from processing a crafted PNG file, leading to a denial of service via an infinite loop in the CDwnTaskExec::ThreadExec function, causing ...

Code injection

Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a PNG image with crafted zTXt chunks, related to 1 the pngpushreadzTXt function in pngread.c, and possibl...

Libpng库'png_push_read_zTXt()'单字节拒绝服务漏洞

BUGTRAQ ID: 31049 CNCAN ID：CNCAN-2008090903 Libpng是一款多种应用程序所使用的解析PNG图形格式的函数库。 Libpng pngpushreadzTXt存在单字节错误，远程攻击者可以利用漏洞对链接此库的应用程序进行拒绝服务攻击。 问题代码存在于pngpushreadzTXt libpng-1.2.31/pngpread.c:1277-1288： pngcharp tmp; tmp = text; text = pngcharppngmallocpngptr, textsize + pnguint32pngptr-zbufsize -...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. VID f9e3e60b-e650-11d8-9b0a-000347a4fa7d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: zsync

The remote host is missing an update to the system as announced in the referenced advisory. VID 8efe93e2-ee62-11d9-8310-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. VID 4cb9c513-03ef-11dc-a51d-0019b95d4f14 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: netpbm

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. VID 172acf78-780c-11dc-b3f4-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. VID 57c705d6-12ae-11dd-bab7-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: linux-png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: linux-png

The remote host is missing an update to the system as announced in the referenced advisory. VID 3a408f6f-9c52-11d8-9366-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

libpng vulnerability

The remote host is probably affected by the vulnerabilities described in CVE-2008-1382 Impact libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG...