Lucene search
+L

3856 matches found

Exploit DB
Exploit DB
added 2006/08/16 12:00 a.m.38 views

Microsoft Windows - '.png' IHDR Block Denial of Service (PoC) (1)

!/usr/bin/perl Microsoft Windows PNG IHDR block DoS poc More info: http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=6 Written by Preddy don't create the poc png file on windows it won't work as it should when i create it on windows with activeperl or visual c the png header become...

5CVSS5.8AI score0.25119EPSS
SaveExploits3
zdt
zdt
added 2006/08/16 12:00 a.m.24 views

MS Windows PNG File IHDR Block Denial of Service Exploit PoC

Exploit for unknown platform in category dos / poc ============================================================ MS Windows PNG File IHDR Block Denial of Service Exploit PoC ============================================================ !/usr/bin/perl Microsoft Windows PNG IHDR block DoS poc More...

7AI score
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/07/19 12:00 a.m.34 views

libpng: Buffer overflow

Background libpng is an open, extensible image format library, with lossless compression. Description In pngrutil.c, the function pngdecompresschunk allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow. Impact By enticing a user to lo...

7.5CVSS7.4AI score0.0405EPSS
SaveExploits0
NVD
NVD
added 2006/07/11 9:05 p.m.23 views

CVE-2006-0033

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed...

9.3CVSS7.4AI score0.15226EPSS
SaveExploits0References10
CVE
CVE
added 2006/07/11 9:00 p.m.63 views

CVE-2006-0033

CVE-2006-0033 is a remote code execution vulnerability in Microsoft Office products (Office 2003 SP1/SP2, Office XP SP3, Office 2000 SP3, and related components) that occurs when parsing a crafted PNG image, causing memory corruption. The issue allows an attacker to gain control of an affected sy...

9.3CVSS7.4AI score0.15226EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2006/07/11 9:00 p.m.59 views

CVE-2006-0033

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when it is parsed...

7.4AI score0.15226EPSS
SaveExploits0References10
securityvulns
securityvulns
added 2006/07/11 12:00 a.m.70 views

Microsoft Security Bulletin MS06-039 Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (915384)

Microsoft Security Bulletin MS06-039 Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution 915384 Published: July 11, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office Impact of Vulnerability: Remote Code Execution Maximum Severity...

9.3CVSS0.5AI score0.19519EPSS
SaveExploits0
Symantec
Symantec
added 2006/07/11 12:00 a.m.19 views

Microsoft Office Malformed PNG File Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability when handling a malformed PNG graphic file. The issue occurs when an Office application such as Excel, Word, or PowerPoint tries to open a malformed PNG graphic file. An attacker could exploit this vulnerability to cau...

0.3AI score
SaveExploits0References2Affected Software2
CERT
CERT
added 2006/07/11 12:00 a.m.36 views

Microsoft Office fails to properly handle PNG images

Overview Microsoft Office applications fail to properly handle PNG images. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft Office applications fail to properly parse PNG images. When an Office document containing a malformed P...

9.3CVSS7.1AI score0.15226EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2006/07/05 12:00 a.m.19 views

Update Protection against Microsoft Windows Media Player PNG Vulnerability (MS06-024)

Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. The Portable Network Graphics PNG specification is an image format used as an alternative to other image formats such as the GIF and TIFF formats. Windows Media Player...

9.3CVSS7AI score0.48723EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2006/07/05 12:00 a.m.30 views

CentOS 4 : libpng (CESA-2006:0205)

Updated libpng packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable...

5CVSS6.2AI score0.03079EPSS
SaveExploits0References4
securityvulns
securityvulns
added 2006/06/30 12:00 a.m.29 views

[OpenPKG-SA-2006.011] OpenPKG Security Advisory (png)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security/ http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2006.011 28-Jun-2006 Package: png Vulnerability: buffer overflow OpenPKG Specific: no...

0.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/06/29 12:00 a.m.27 views

Mandrake Linux Security Advisory : libwmf (MDKSA-2006:114-1)

Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function. CVE-2004-0941 Integer overflows were reported in the GD Graphics...

10CVSS7.2AI score0.28255EPSS
SaveExploits1References2
securityvulns
securityvulns
added 2006/06/28 12:00 a.m.63 views

[Full-disclosure] [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:113 http://www.mandriva.com/security/ Package : tetex Date : June 27, 2006 Affected: 10.2, 2006.0 Problem Description: Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly...

10CVSS7AI score0.10693EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2006/06/28 12:00 a.m.37 views

Mandrake Linux Security Advisory : tetex (MDKSA-2006:113)

Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly other versions. These overflows allow remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow ...

10CVSS6.8AI score0.28255EPSS
SaveExploits3References3
Saint
Saint
added 2006/06/16 12:00 a.m.39 views

Windows Media Player PNG buffer overflow

Added: 06/16/2006 CVE: CVE-2006-0025 BID: 18385 OSVDB: 26430 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A buffer overflow in Windows Media Player allows command execution when a user opens a specially crafted PNG image file. Resolution Apply...

9.3CVSS6.8AI score0.48723EPSS
SaveExploits5
Saint
Saint
added 2006/06/16 12:00 a.m.26 views

Windows Media Player PNG buffer overflow

Added: 06/16/2006 CVE: CVE-2006-0025 BID: 18385 OSVDB: 26430 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A buffer overflow in Windows Media Player allows command execution when a user opens a specially crafted PNG image file. Resolution Apply...

9.3CVSS6.7AI score0.48723EPSS
SaveExploits5
Saint
Saint
added 2006/06/16 12:00 a.m.32 views

Windows Media Player PNG buffer overflow

Added: 06/16/2006 CVE: CVE-2006-0025 BID: 18385 OSVDB: 26430 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A buffer overflow in Windows Media Player allows command execution when a user opens a specially crafted PNG image file. Resolution Apply...

9.3CVSS6.8AI score0.48723EPSS
SaveExploits5
Saint
Saint
added 2006/06/16 12:00 a.m.36 views

Windows Media Player PNG buffer overflow

Added: 06/16/2006 CVE: CVE-2006-0025 BID: 18385 OSVDB: 26430 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A buffer overflow in Windows Media Player allows command execution when a user opens a specially crafted PNG image file. Resolution Apply...

9.3CVSS6.7AI score0.48723EPSS
SaveExploits5
securityvulns
securityvulns
added 2006/06/14 12:00 a.m.40 views

Windows Media Player PNG files buffer overflow

Buffer overflow on PNG files processing...

3.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder