Buffer overflow

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2008-0544

Heap-based buffer overflow in the IMGLoadLBMRW function in IMGlbm.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information...

CVE-2008-0544

Heap-based buffer overflow in the IMGLoadLBMRW function in IMGlbm.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information...

CVE-2008-0544

Heap-based buffer overflow in the IMGLoadLBMRW function in IMGlbm.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2007-6697

The CVE-2007-6697 entry concerns a buffer overflow in SDL_image prior to 1.2.7, specifically in the LWZReadByte function of IMG_gif.c. A crafted GIF could crash the application or potentially execute arbitrary code, aligning with the related CVE-2006-4484 class of GIF handling vulnerabilities in ...

CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

CVE-2008-0544

SDL_image (library used for image loading) is affected by a heap-based buffer overflow in IMG_loadLBM_RW (IMG_lbm.c) that impacts versions before 1.2.7. A crafted IFF ILBM file can trigger a crash or potentially allow arbitrary code execution. Root cause is a boundary/overflow condition in handli...

openSUSE 10 Security Update : SDL_image (SDL_image-4956)

Specially crafted GIF files could crash the SDLimage library CVE-2006-4484. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update SDLimage-4956. The text description of this plugin is C SUSE LLC...

SDL_image无效GIF文件LWZ Minimum Code Size远程缓冲区溢出漏洞

BUGTRAQ ID: 27417 SDLImage是用于处理图形文件的开源函数库。 SDLImage在处理畸形格式的图形文件时存在漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 SDLImage库没有正确地处理Table Based Image Data头中带有无效LWZ Minimum Code Size的图形文件。标准允许代码的最大大小为12位，但SDLimage没有执行检查，因此可能触发缓冲区溢出。以下是IMGgif.c文件的ReadImage函数中的漏洞代码： ... unsigned char c; ... if LWZReadBytesrc, TRUE...

SDL_Image library buffer overflow

Buffer overflow on GIF parsing...

SDL_Image 1.2.6 and prior GIF handling buffer overflow

Name : SDLImage 1.2.6 and prior GIF handling buffer overflow Type : Remote DoS / Code Execution ? Impact : Low / Medium ? Credits : Gynvael Coldwind / Team Vexillium Discovered: 2007-12-17 Published : 2008-01-23 Brief SDLImage is an open source library providing image file handling functionality...

sdl_image -- buffer overflow vulnerabilities

Secunia reports: Two vulnerabilities have been reported in SDLimage, which can be exploited by malicious people to cause a Denial of Service or potentially compromise an application using the library. A boundary error within the LWZReadByte function in IMGgif.c can be exploited to trigger the...

SDL_image 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow

SDLimage 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occur...