DSA-591-1 libgd2 - integer overflows

Bulletin has no description...

GLSA-200411-08 : GD: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200411-08 GD: Integer overflow infamous41md found an integer overflow in the memory allocation procedure of the GD routine that handles loading PNG image files. Impact : A remote attacker could entice a user to load a carefully...

GD: Integer overflow

Background The GD graphics library is an open source library which allows programmers to easily generate PNG, JPEG, GIF and WBMP images from many different programming languages. Description infamous41md found an integer overflow in the memory allocation procedure of the GD routine that handles...

USN-11-1: libgd2 vulnerabilities

Several buffer overflows have been discovered in libgd's PNG handling functions. If an attacker tricked a user into loading a malicious PNG image, they could leverage this into executing arbitrary code in the context of the user opening image. Most importantly, this library is commonly used in PH...

CVE-2004-0990

CVE-2004-0990 describes an integer overflow in the GD Graphics Library (libgd) 2.0.28 (and possibly earlier/other versions) that can be triggered by PNG image files with large image row values. This leads to a heap-based buffer overflow in gdImageCreateFromPngCtx, enabling remote denial of servic...

CVE-2004-0990

Integer overflow in GD Graphics Library libgd 2.0.28 libgd2, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the...

libgd integer overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Subject: GD Graphics Library integer overflow leading to heap overflow. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Product Description: An ANSI C library for the dynamic creation o...

libgd integer overflow

Integer overflow during PNG format parsing...

GD Graphics Library - Local Heap Overflow

include include include include include include include include include define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx; exitEXITFAILURE;while0 / a chunk looks like: 4 byte len - just the length of data 4 byte id - identifies chunk data type 0+ data -...

GD Graphics Library Heap Overflow Proof of Concept Exploit

Exploit for linux platform in category local exploits ========================================================== GD Graphics Library Heap Overflow Proof of Concept Exploit ========================================================== include include include include include include include include...

GD Graphics Library Heap Overflow Proof of Concept Exploit

No description provided by source. include stdio.h include sys/types.h include netinet/in.h include fcntl.h include string.h include unistd.h include stdlib.h include stdint.h include zlib.h define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx;...

GD Graphics Library - Local Heap Overflow

GD Graphics Library - Local Heap Overflow include include include include include include include include include define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx; exitEXITFAILURE;while0 / a chunk looks like: 4 byte len - just the length of data 4 byte...

gd -- integer overflow

infamous41md reports about the GD Graphics Library: There is an integer overflow when allocating memory in the routine that handles loading PNG image files. This later leads to heap data structures being overwritten. If an attacker tricked a user into loading a malicious PNG image, they could...

USN-1-1: PNG library vulnerabilities

Several integer overflow vulnerabilities were discovered in the PNG library. These vulnerabilities could be exploited by an attacker by providing a specially crafted PNG image which, when processed by the PNG library, could result in the execution of program code provided by the attacker. The PNG...

DSA-570-1 libpng - integer overflow

Bulletin has no description...

Debian DSA-140-2 : libpng - buffer overflow

Developers of the PNG library have fixed a buffer overflow in the progressive reader when the PNG datastream contains more IDAT data than indicated by the IHDR chunk. Such deliberately malformed datastreams would crash applications which could potentially allow an attacker to execute malicious...

CVE-2002-1185

CVE-2002-1185 affects Internet Explorer 5.01–6.0. The issue is a parsing flaw where PNG parameters are not properly checked when opening a PNG file, enabling a remote attacker to trigger a heap-based buffer overflow during decompression and cause a denial of service (crash). The connected documen...

CVE-2002-1185

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service crash by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File...

CVE-2002-1363

CVE-2002-1363 affects libpng 1.2.5 and earlier, where incorrect offset calculations in the PNG library can cause a remote crash and potentially arbitrary code execution via a buffer overflow in row buffers. The vulnerability is evidenced in multiple advisories (Red Hat RHSA, Debian DSA) and is re...

CVE-2002-1185: Undefined Security Weakness

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service crash by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File...