Slackware 10.0 / 9.1 / current : imagemagick (SSA:2004-223-02)

New imagemagick packages are available for Slackware 9.1, 10.0, and -current to fix security issues with PNG images. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2004-223-02. The text...

FreeBSD : ImageMagick png vulnerability fix (a713c0f9-ec54-11d8-9440-000347a4fa7d)

Glenn Randers-Pehrson has contributed a fix for the png vulnerabilities discovered by Chris Evans. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

FreeBSD : linux-png (1413)

The following package needs to be updated: linux-png %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

DEBIAN-CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

CVE-2005-2096: Undefined Security Weakness

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

CVE-2005-1211

Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file...

CVE-2005-1211

CVE-2005-1211 is an Internet Explorer PNG rendering memory corruption vulnerability (CAN-2005-1211) in the pngfilt.dll component that could allow remote code execution if a user opens a crafted PNG. Microsoft addressed this with MS05-025, delivering a security update for IE across affected Window...

Microsoft Internet Explorer PNG images buffer overflow

Heap overflow on large specific PNG chunk...

CVE-2005-1211: Undefined Security Weakness

Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file...

Internet Explorer PNG Overflow

Internet Security Systems Protection Advisory June 14, 2005 Internet Explorer PNG Overflow Summary: ISS has shipped protection for a flaw X-Force has discovered in the PNG image processing library used in software such as Microsoft's Internet Explorer web browser. By crafting a PNG file in a...

CVE-2005-1211

Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file...

Microsoft Internet Explorer PNG Image Rendering Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a buffer overflow vulnerability. This issue exists in the PNG image rendering library used by the browser. Successful exploitation will result in execution of arbitrary code in the context of the currently logged in user. This issue is present i...

Microsoft Internet Explorer buffer overflow in PNG image rendering component

Overview A buffer overflow in the PNG image rendering component of Microsoft Internet Explorer IE may allow a remote attacker to execute code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics...

GLSA-200506-06 : libextractor: Multiple overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-06 libextractor: Multiple overflow vulnerabilities Xpdf is vulnerable to multiple overflows, as described in GLSA 200501-28. Also, integer overflows were discovered in Real and PNG extractors. Impact : An attacker could...

[ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities

Gentoo Linux Security Advisory GLSA 200506-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

libextractor: Multiple overflow vulnerabilities

Background libextractor is a library used to extract meta-data from files. It makes use of Xpdf code to extract information from PDF files. Description Xpdf is vulnerable to multiple overflows, as described in GLSA 200501-28. Also, integer overflows were discovered in Real and PNG extractors...