[Full-disclosure] iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow

Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow iDefense Security Advisory 06.13.06 http://www.idefense.com/application/poi/display?type=vulnerabilities June 13, 2006 I. BACKGROUND Windows Media Player is a video and audio file player for Windows based systems. It supports...

Stack overflow

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size...

CVE-2006-0025

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size...

Immunity Canvas: MS06_024

Name| ms06024 ---|--- CVE| CVE-2006-0025 Exploit Pack| CANVAS Description| Microsoft Windows Media Player Malformed PNG Vulnerability Notes| CVE Name: CVE-2006-0025 VENDOR: Microsoft MSADV: MS06-024 Repeatability: One shot MSRC: http://www.microsoft.com/technet/security/bulletin/ms06-024.mspx CVS...

CVE-2006-0025

CVE-2006-0025 is a stack-based buffer overflow in Windows Media Player 9/10 triggered by processing crafted PNG chunks, enabling remote code execution. Affected component: Windows Media Player (version 9 and 10 explicitly cited; other sources describe PNG chunk handling). Root cause: improper par...

CVE-2006-0025

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size...

Microsoft Windows Media Player PNG processing buffer overflow

Overview Microsoft Windows Media Player contains a stack-based buffer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Windows Media Player Windows Media Player is a multimedia application that comes with...

Microsoft Windows Media Player Malformed PNG Remote Code Execution Vulnerability

Description Microsoft Windows Media Player is prone to a remote code-execution vulnerability. This vulnerability is related to handling of malicious PNG images. PNG images may be embedded in Windows Media Player skin files. Attackers may be able to exploit this issue by causing the application to...

MS06-024: Vulnerability in Windows Media Player Could Allow Remote Code Execution (917734)

The remote host is running Windows Media Player. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remo...

Microsoft Windows Media Player PNG Processing Overflow (917734)

Binary data 3650.prm...

DSA-992-1 ffmpeg - buffer overflow

Bulletin has no description...

BlackBerry Enterprise Server PNG Attachment Buffer Overflow

The version of BlackBerry Enterprise Server installed on the remote host reportedly is affected by a heap-based buffer overflow that can be triggered by a malformed PNG attachment. Exploitation of this issue may cause the Attachment Service to stop responding or crash and may even allow for the...

RHEL 4 : libpng (RHSA-2006:0205)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0205 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. A heap based buffe...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable...

GStreamer FFmpeg plugin: Heap-based buffer overflow

Background The GStreamer FFmpeg plugin uses code from the FFmpeg library to provide fast colorspace conversion and multimedia decoders to the GStreamer open source media framework. Description The GStreamer FFmpeg plugin contains derived code from the FFmpeg library, which is vulnerable to a heap...

Moderate: Red Hat Security Advisory: gd security update

Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG. Several buffe...

[SA18654] libpng "png_set_strip_alpha()" Buffer Overflow Vulnerability

TITLE: libpng "pngsetstripalpha" Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA18654 VERIFY ADVISORY: http://secunia.com/advisories/18654/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: libpng 1.x http://secunia.com/product/3439/ DESCRIPTION: A...

Ubuntu 5.04 : ffmpeg vulnerability (USN-230-1)

Simon Kilvington discovered a buffer overflow in the avcodecdefaultgetbuffer function of the ffmpeg library. By tricking an user into opening a malicious movie which contains specially crafted PNG images, this could be exploited to execute arbitrary code with the user's privileges. Note that...

Ubuntu 4.10 / 5.04 / 5.10 : xine-lib vulnerability (USN-230-2)

USN-230-1 fixed a vulnerability in the ffmpeg library. The Xine library contains a copy of the ffmpeg code, thus it is vulnerable to the same flaw. For reference, this is the original advisory : Simon Kilvington discovered a buffer overflow in the avcodecdefaultgetbuffer function of the ffmpeg...

Ubuntu 4.10 : libgd2 vulnerability (USN-25-1)

CAN-2004-0990 described several more buffer overflows which had been discovered in libgd2's PNG handling functions. However, it was determined that the update from USN-11-1 was not sufficient to prevent every possible attack, so another update is required. If an attacker tricked a user into loadi...