CVE-2012-0916

Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file...

CVE-2012-0916

CVE-2012-0916 affects RenRen Talk 2.9. The vulnerability is a heap-based buffer overflow in

CVE-2012-0915

Summary: CVE-2012-0915 concerns RenRen Talk 2.9, where an integer signedness error in skin-file handling enables a remote attacker to trigger a heap-based buffer overflow via a crafted BMP image. The fault is in how dimensions of a skin file are processed, leading to arbitrary code execution as d...

CVE-2012-0916: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as demonstrated using a PNG file...

CVE-2012-0915: Undefined Security Weakness

Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading to a heap-based buffer overflow, as demonstrated using a BMP image...

PT-2012-2947

Name of the Vulnerable Software and Affected Versions RenRen Talk version 2.9 Description The issue is caused by an integer signedness error that allows remote attackers to execute arbitrary code via crafted dimensions of a skin file. This leads to a heap-based buffer overflow, which can be...

PT-2012-2948

Name of the Vulnerable Software and Affected Versions RenRen Talk version 2.9 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted image in a chat message. This can be achieved by sending a specially crafted PNG file. Recommendations For...