teTeX: Multiple buffer overflows

Background teTeX is a complete TeX distribution for editing documents. Description Mark Richters discovered a buffer overflow in the opensty function in file mkind.c. Other vulnerabilities have also been discovered in the same file but might not be exploitable CVE-2007-0650. Tetex also includes...

CVE-2007-5133: Undefined Security Weakness

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service CPU consumption via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png...

gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

Microsoft Windows Explorer PNG DoS

Infinite loop on invalid PNG file parsing...

Possible Windows Explorer bad PNG file preview integer overflow handling

Hi folks, Can anyone confirm that the attached PNG file is causing Explorer to eat 100 CPU, and if this is a known issue ? Currently tested with an up-to-date Windows XP and Windows Vista The probable cause is an integer overflow in the PNG chunk size handling, which is 32-bit large, and which ca...

Fedora Core 6 : php-5.1.6-3.7.fc6 (2007-709)

This update fixes a number of security issues in PHP : - various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. CVE-2007-3996 - ...

gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

[SECURITY] Fedora Core 6 Update: gd-2.0.35-1.fc6

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

[SECURITY] Fedora 7 Update: gd-2.0.35-1.fc7

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...

MS07-047: Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)

There is a vulnerability in the remote version of Windows Media Player that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue PNG image and send it to a victim on the remote host. C Tenable Network Security, Inc...

GLSA-200708-05 : GD: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-05 GD: Multiple vulnerabilities Xavier Roche discovered an infinite loop in the gdPngReadData function when processing a truncated PNG file CVE-2007-2756. An integer overflow has been discovered in the gdImageCreateTrueColo...

Microsoft Windows Explorer - .png Image Local Denial of Service

Microsoft Windows Explorer - .png Image Local Denial of Service source: https://www.securityfocus.com/bid/25816/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability because it fails to handle malformed PNG image files. Attackers can exploit this issue to cause Windows...

Microsoft Windows Explorer - '.png' Image Local Denial of Service

source: https://www.securityfocus.com/bid/25816/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability because it fails to handle malformed PNG image files. Attackers can exploit this issue to cause Windows Explorer to exhaust CPU cycles and become unresponsive...

CVE-2006-7210

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service cpu consumption via a PNG image with crafted 1 Width and 2 Height values in the IHDR block...

CVE-2006-7210

The CVE-2006-7210 entry relates to Microsoft Windows 2000, XP, and Server 2003 where remote attackers can trigger a DoS (CPU consumption) by viewing a crafted PNG image that abuses the IHDR block (specifics: crafted Width and Height values). The vulnerability affects the PNG image handling path i...

CVE-2006-7210

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service cpu consumption via a PNG image with crafted 1 Width and 2 Height values in the IHDR block...

CVE-2006-7210: Undefined Security Weakness

Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service cpu consumption via a PNG image with crafted 1 Width and 2 Height values in the IHDR block...

Mandrake Linux Security Advisory : gd (MDKSA-2007:122)

A flaw in libgd2 was found by Xavier Roche where it would not correctly validate PNG callback results. If an application linked against libgd2 was tricked into processing a specially crafted PNG file, it could cause a denial of service scenario via CPU resource consumption. The updated packages...

libgd PNG DoS

Resource exhaustion on PNG parsing...

[Full-disclosure] [ MDKSA-2007:122 ] - Updated gd packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:122 http://www.mandriva.com/security/ Package : gd Date : June 13, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: A flaw in libgd2 was found by Xavier Roche where it would n...