CVE-2013-5359

Affected software: Google Picasa. The CVE-2013-5359 issue is a stack-based buffer overflow in Picasa3.exe triggered by parsing a specially crafted KDC file (71 bytes), leading to arbitrary code execution. Public details confirm the vulnerability exists in Google Picasa before 3.9.0 Build 137.69, ...

CVE-2013-5359

Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a crafted RAW file, as demonstrated using a KDC file with a certain size...

CVE-2013-5357

Google Picasa

CVE-2013-5349

Google Picasa (Windows/macOS) versions prior to 3.9.0 Build 137.69 are affected by CVE-2013-5349 due to an integer underflow when parsing Canon RAW CR2 JPEG tags, which can trigger a heap-based buffer overflow and arbitrary code execution. The OpenVAS/Nessus entries confirm multiple related flaws...

CVE-2013-5358

CVE-2013-5358 affects Google Picasa via Picasa3.exe in vulnerable builds prior to 3.9.0 Build 137.69. The issue is memory corruption triggered by parsing crafted TIFF tags in conjunction with a DSLR-A100 model and sequences of tags, potentially enabling remote code execution or other instability....

KLA10180 Multiple vulnerabilities in Google Picasa

Multiple serious vulnerabilities have been found in Google Picasa. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via a specially designed RAW file; ...

Fedora 19 : LibRaw-0.14.8-3.fc19.20120830git98d925 (2013-15562)

Raphael Geissert reported two denial of service flaws in LibRaw 1 : CVE-2013-1438 : Specially crafted photo files may trigger a division by zero, an infinite loop, or a NULL pointer dereference in libraw leading to denial of service in applications using the library. These vulnerabilities appear ...

Fedora 18 : LibRaw-0.14.8-3.fc18.20120830git98d925 (2013-15576)

Raphael Geissert reported two denial of service flaws in LibRaw 1 : CVE-2013-1438 : Specially crafted photo files may trigger a division by zero, an infinite loop, or a NULL pointer dereference in libraw leading to denial of service in applications using the library. These vulnerabilities appear ...

Google Picasa < 3.9 Build 136.17 Multiple Vulnerabilities

The version of Google Picasa running on the remote host is earlier than 3.9 Build 136.17. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the...

Google Picasa Installed (Mac OS X)

Google Picasa is installed on the remote Mac OS X host. TRUSTED...

Google Picasa < 3.9 Build 3.9.14.34 Multiple Vulnerabilities (Mac OS X)

The installed version of Google Picasa is earlier than 3.9 Build 3.9.14.34. As such, it is affected by the following vulnerabilities: - A buffer underflow vulnerability exists in the 'LZWDecodeCompat' function in the LibTIFF library. An attacker could exploit this issue through the use of a...

Google Picasa BMP图形文件处理远程堆缓冲区溢出漏洞

BUGTRAQ ID: 58613 Picasa是一套应用软件，用于整理和编辑数字相片，起先由Idealab所创，之后于2004年为Google所有。 Google Picasa 3.9.0 Build 136.09 for Windows及3.9.0 Build 3.9.14.34 for Mac之前版本，在处理BMP图形的色表时存在符号扩展错误，如果BMP图形存在特制的"biBitCount"字段，此漏洞可造成堆缓冲区溢出。 0 Google Picasa 3.x 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Malware for xbox Kinect created by 15 years old Indian researchers

Malware for xbox Kinect created by 15 years old Indian researchers Indian researchers from MalCon have created a malware that utlizes Microsoft Kinect to secretly capture pictures and upload to a picasa account. A 15year old Indian security researcher 'Shantanu Gawde ' from MalCon Research has...

Malware for xbox Kinect created by 15 years old Indian researchers

Malware for xbox Kinect created by 15 years old Indian researchers Indian researchers from MalCon have created a malware that utlizes Microsoft Kinect to secretly capture pictures and upload to a picasa account. A 15year old Indian security researcher 'Shantanu Gawde' from MalCon Research has...

Windows Gather Google Picasa Password Extractor

This module extracts and decrypts the login passwords stored by Google Picasa. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Google Picasa Password Extractor', 'Description' = ...

Google Picasa JPEG Image Processing Remote Code Execution Vulnerability (Windows)

This host is installed with google picasa and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglepicasajpegimgcodeexecvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Picasa JPEG Image Processing Remote Code Execution Vulnerability Windows Authors:...

Google Picasa JPEG Image Processing Remote Code Execution Vulnerability - Windows

google picasa is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Picasa <= 3.6 Build 105.61 JPEG Image Handling Remote Code Execution

The version of Google Picasa running on the remote host is earlier than 3.6 Build 105.67. As such, it reportedly does not properly handle JPEG image files with invalid properties. If a remote attacker can trick a user into opening a specially crafted JPEG file with the affected application, he...

CVE-2011-2747

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file...

Code injection

Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file...