CVE-2010-0516

CVE-2010-0516 is a heap-based buffer overflow in Apple QuickTime for Mac OS X prior to 10.6.3. A crafted .mov file using the RLE encoding can cause memory corruption when the decompressed data length exceeds the heap chunk, enabling remote code execution or a denial of service (application crash)...

CVE-2010-0516

Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that o...

CVE-2010-0250

Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server...

ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability

ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-015 February 9, 2010 -- CVE ID: CVE-2010-0250 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows XP Microsoft Windows Vista --...

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow (CVE-2006-4183)

Microsoft DirectX is a set of libraries that aim for accelerated video and audio experience on Microsoft Windows operating system. The three-dimension 3D acceleration engine of DirectX is known as Direct3D. Direct3D include texture rendering, which displays bitmap images on the surface of 3D...

Mandrake Linux Security Advisory : imlib2 (MDKSA-2007:156)

M Joonas Pihlaja discovered several vulnerabilities in the Imlib2 graphics library. The load function of several of the Imlib2 image loaders does not check the width and height of an image before allocating memory. As a result, a carefully crafted image file can trigger a segfault when an...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 801207.prm...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 5492.prm...

CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

Heap overflow

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

CVE-2008-3639

Heap-based buffer overflow in the readrle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded RLE data containing a small image and a large row count...

Debian Security Advisory DSA 567-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 567-1. OpenVAS Vulnerability Test $Id: deb5671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 567-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1137-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 1137-1. Tavis Ormandy of the Google Security Team discovered several problems in the TIFF library. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2006-3459 Several stack-buffer overflows...

Opera Web Browser Bitmap文件RLE远程拒绝服务漏洞

Opera是一款开放源代码的WEB浏览器。 Opera处理BMP文件存在问题，远程攻击者可以利用漏洞使浏览器停止响应，造成拒绝服务攻击。 攻击者特殊构建一个包含最大宽度的，并且数据使用00 02 FF FF opcodes填充的BMP文件，并由一个包含多个img标签显示BMP文件的WEB页来诱使用户使用Opera来访问，可导致应用程序停止响应，造成拒绝服务攻击。 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.24 目前没有解决方案提供： http://www.opera.com/...

Opera Web浏览器位图文件RLE远程拒绝服务漏洞

BUGTRAQ ID: 26721 Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形的BMP文件时存在漏洞，可能导致系统一定时间的性能大幅下降。 BMP文件允许游程长度编码4位和8位的位图。BMP格式中所使用的RLE有一些额外的功能，如移动到其他行和列的写指针（00 02 XX YY）。Opera实现00 02 XX YY功能的算法过于缓慢，正常解压算法是将XX和YY width添加到写指针，而Opera的实现要执行XX + YY width递增，每次递增都要执行自己的检查和其他计算。 攻击者可以创建最大宽度（约32000像素）的BMP文件，用00 02 FF F...

Microsoft DirectX RLE压缩Targa图形文件堆溢出漏洞

BUGTRAQ ID: 24963 CVECAN ID: CVE-2006-4183 Microsoft DirectX是一个API集，用于在Windows操作系统上处理有关游戏编程的任务。 DirectX库打开RLE压缩的Targa格式图形文件的方式存在堆溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形文件控制用户系统。...

iDefense Security Advisory 07.18.07: Microsoft DirectX RLE Compressed Targa Image File Heap Overflow

Microsoft DirectX RLE Compressed Targa Image File Heap Overflow iDefense Security Advisory 07.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 18, 2007 I. BACKGROUND Microsoft DirectX is a collection of APIs for easily handling tasks related to game programming on the Microsoft...

CVE-2006-4183

Heap-based buffer overflow in Microsoft DirectX SDK February 2006 and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding RLE compression that produces more data than expected when...

Buffer overflow

Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbitrary code via a crafted 1 BMP, 2 DIB, or 3 RLE file...