4547 matches found
CVE-2004-1244
CVE-2004-1244 is a PNG-processing remote-code-execution vulnerability in Windows Media Player 9 (WMP9) that occurs when parsing PNG images with excessively large width/height values. Affects WMP9 and related Windows components (e.g., Windows Messenger, MSN Messenger) and can allow arbitrary code ...
CVE-2004-1244
Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large 1 width or 2 height values, aka the "PNG Processing Vulnerability."...
CVE-2004-1244: Undefined Security Weakness
Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large 1 width or 2 height values, aka the "PNG Processing Vulnerability."...
Microsoft Windows Media Player Remote PNG Image Format Buffer Overflow Vulnerability
Description A remote buffer overflow vulnerability affects the Portable Network Graphics PNG image format processing functionality of Microsoft Windows Media Player. This issue is due to a failure of the application to properly validate the size of image data prior to copying it into static proce...
MS05-009: Vulnerability in PNG Processing Could Allow Remote Code Execution (890261)
The remote host is running either Windows Media Player 9 or MSN Messenger. There is a vulnerability in the remote version of this software that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, one attacker would need to set up a rogue PNG image and send ...
MSN Messenger < 6.2.0205 PNG File Remote Overflow (deprecated)
Binary data 2603.prm...
Microsoft MSN Messenger/Windows Messenger PNG Buffer Overflow Vulnerability
Description A remotely exploitable buffer overflow exists in MSN Messenger and Windows Messenger. This vulnerability is related to parsing of Portable Network Graphics PNG image header data. Successful exploitation will result in execution of arbitrary code in the context of the vulnerable client...
Windows Media Player does not properly handle PNG images with excessive width or height values
Overview Microsoft Windows Media Player fails to properly handle PNG images containing unexpected information. Remote attackers may be able to craft a malicious PNG image that would cause Media Player to execute arbitrary code. Description Microsoft Windows Media Player WMP is an application that...
Microsoft MSN Messenger 6.2.0137 - '.png' Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/12506/info A remotely exploitable buffer overflow exists in MSN Messenger and Windows Messenger. This vulnerability is related to parsing of Portable Network Graphics PNG image header data. Successful exploitation will result in execution of arbitrary...
security flaw
Integer overflow in GD Graphics Library libgd 2.0.28 libgd2, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the...
USN-33-1: libgd vulnerabilities
CAN-2004-0990 described several buffer overflows which had been discovered in libgd's PNG handling functions. Another update is required because the update from USN-21-1 was not sufficient to prevent every possible attack. If an attacker tricks a user into loading a malicious PNG or XPM image, th...
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which 1 the pnghandletRNS function does not properly validate the length of transparency chunk tRNS data, or the 2 pnghandlesBIT or 3...
CVE-2004-0598
The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...
CVE-2004-0599
Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...
CVE-2004-0598
The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...
CVE-2004-0599
Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...
USN-25-1: libgd2 vulnerability
CAN-2004-0990 described several more buffer overflows which had been discovered in libgd2's PNG handling functions. However, it was determined that the update from USN-11-1 was not sufficient to prevent every possible attack, so another update is required. If an attacker tricked a user into loadi...
USN-21-1: libgd vulnerabilities
Several buffer overflows have been discovered in libgd's PNG handling functions. If an attacker tricked a user into loading a malicious PNG image, they could leverage this into executing arbitrary code in the context of the user opening image. Most importantly, this library is commonly used in PH...
Debian DSA-589-1 : libgd1 - integer overflows
'infamous41md' discovered several integer overflows in the PNG image decoding routines of the GD graphics library. This could lead to the execution of arbitrary code on the victim's machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...
