CVE-2004-0990

Integer overflow in GD Graphics Library libgd 2.0.28 libgd2, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the...

libgd integer overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Subject: GD Graphics Library integer overflow leading to heap overflow. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Product Description: An ANSI C library for the dynamic creation o...

libgd integer overflow

Integer overflow during PNG format parsing...

GD Graphics Library Heap Overflow Proof of Concept Exploit

Exploit for linux platform in category local exploits ========================================================== GD Graphics Library Heap Overflow Proof of Concept Exploit ========================================================== include include include include include include include include...

GD Graphics Library Heap Overflow Proof of Concept Exploit

No description provided by source. include stdio.h include sys/types.h include netinet/in.h include fcntl.h include string.h include unistd.h include stdlib.h include stdint.h include zlib.h define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx;...

gd -- integer overflow

infamous41md reports about the GD Graphics Library: There is an integer overflow when allocating memory in the routine that handles loading PNG image files. This later leads to heap data structures being overwritten. If an attacker tricked a user into loading a malicious PNG image, they could...

GD Graphics Library - Local Heap Overflow

include include include include include include include include include define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx; exitEXITFAILURE;while0 / a chunk looks like: 4 byte len - just the length of data 4 byte id - identifies chunk data type 0+ data -...

GD Graphics Library - Local Heap Overflow

GD Graphics Library - Local Heap Overflow include include include include include include include include include define OUTFILE "britnaysparespr0n.png" define BS 0x1000 define ALIGN 0 define diex do perrorx; exitEXITFAILURE;while0 / a chunk looks like: 4 byte len - just the length of data 4 byte...

USN-1-1: PNG library vulnerabilities

Several integer overflow vulnerabilities were discovered in the PNG library. These vulnerabilities could be exploited by an attacker by providing a specially crafted PNG image which, when processed by the PNG library, could result in the execution of program code provided by the attacker. The PNG...

DSA-570-1 libpng - integer overflow

Bulletin has no description...

Debian DSA-140-2 : libpng - buffer overflow

Developers of the PNG library have fixed a buffer overflow in the progressive reader when the PNG datastream contains more IDAT data than indicated by the IHDR chunk. Such deliberately malformed datastreams would crash applications which could potentially allow an attacker to execute malicious...

CVE-2002-1185

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service crash by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File...

CVE-2002-1185

CVE-2002-1185 affects Internet Explorer 5.01–6.0. The issue is a parsing flaw where PNG parameters are not properly checked when opening a PNG file, enabling a remote attacker to trigger a heap-based buffer overflow during decompression and cause a denial of service (crash). The connected documen...

CVE-2002-1363

CVE-2002-1363 affects libpng 1.2.5 and earlier, where incorrect offset calculations in the PNG library can cause a remote crash and potentially arbitrary code execution via a buffer overflow in row buffers. The vulnerability is evidenced in multiple advisories (Red Hat RHSA, Debian DSA) and is re...

CVE-2002-1185: Undefined Security Weakness

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service crash by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File...

CVE-2004-0421

The Portable Network Graphics library libpng 1.0.15 and earlier allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message...

CVE-2004-0421

The Portable Network Graphics library libpng 1.0.15 and earlier allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message...

LibPNG Graphics Library Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ====================================================== LibPNG Graphics Library Remote Buffer Overflow Exploit ====================================================== / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com...

LibPNG Graphics Library - Remote Buffer Overflow

LibPNG Graphics Library - Remote Buffer Overflow / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po outfile -all u need to give is retaddr, the default file it creates is controlled by the defin...

LibPNG Graphics Library - Remote Buffer Overflow

/ exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po outfile -all u need to give is retaddr, the default file it creates is controlled by the define below, or u can pass a diff outfile name on the...