gdk-pixbuf2 -- head overflow and DoS

reports: We found a heap overflow and a DoS in the gdk-pixbuf implementation triggered by the scaling of tga file. We found a heap overflow in the gdk-pixbuf implementation triggered by the scaling of gif file...

CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

UBUNTU-CVE-2015-7673

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash and possibly execute arbitrary code via a crafted Truevision TGA TARGA file...

FastStone Image Viewer 5.3 .tga Crash PoC

Exploit for windows platform in category dos / poc Exploit Title : FastStoneImage Viewer Corrupted tga IMAGESPECIFICATION.Width Crash POC Product : FastStoneImage Viewer Date : 25.02.2015 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link :...

FastStone Image Viewer 5.3 - '.tga' Crash (PoC)

Exploit Title : FastStoneImage Viewer Corrupted tga IMAGESPECIFICATION.Width Crash POC Product : FastStoneImage Viewer Date : 25.02.2015 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.faststone.org/FSViewerDownload.htm Vulnerable version :...

Hero big eye processing of the TGA File format buffer overflow vulnerability, the EIP can be controlled-the vulnerability warning-the black bar safety net

Brief description: Software description: http://baike.baidu.com/view/222352.html Download: http://www.onlinedown.net/soft/2704.htm http://dl.pconline.com.cn/html2/1/114/id=1879&pn=0.html In the processing of the TGA File format when there is a buffer overflow vulnerability, the eip can be...

Tony Cook Imager 0.4x JPEG and TGA Images Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17415/info The Perl Imager module is susceptible to a denial-of-service vulnerability. This issue is due to a failure of the software to properly handle unexpected image data. Malformed image files may cause a crash in...

Design/Logic Flaw

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

Scientific Linux Security Update : openoffice.org and openoffice.org2 on SL4.x i386/x86_64

An array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code...

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...

Design/Logic Flaw

MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 is affected. The CVE-2012-2940 entry describes a denial of service (application crash) triggered by processing crafted image files in multiple formats (PNG, WMF, PSD, TGA, TTF, BMP, TIFF, PCX) remotely. The connected documents corroborate the same description acros...

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...

Real-DRAW PRO 5.2.4 - Import File Crash

Real-DRAW PRO 5.2.4 - Import File Crash Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohame...

Real-DRAW PRO 5.2.4 - Import File Crash

Real-DRAW PRO 5.2.4 Import File Crash =================================================================================== Exploit Title:Real-DRAW PRO 5.2.4 Malicious PNG File Denial of service Vendor : http://www.mediachance.com/ Author: Ahmed Elhady Mohamed Email : [email protected]...

FreeBSD : openoffice.org -- Multiple vulnerabilities (f2b43905-3545-11e0-8e81-0022190034c0)

OpenOffice.org Security Team reports : Fixed in OpenOffice.org 3.3 - CVE-2010-2935 / CVE-2010-2936: Security Vulnerability in OpenOffice.org related to PowerPoint document processing - CVE-2010-3450: Security Vulnerability in OpenOffice.org related to Extensions and filter package files -...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openoffice.org vulnerabilities (USN-1056-1)

Charlie Miller discovered several heap overflows in PPT processing. If a user or automated system were tricked into opening a specially crafted PPT document, a remote attacker could execute arbitrary code with user privileges. Ubuntu 10.10 was not affected. CVE-2010-2935, CVE-2010-2936 Marc...

USN-1056-1: OpenOffice.org vulnerabilities

Charlie Miller discovered several heap overflows in PPT processing. If a user or automated system were tricked into opening a specially crafted PPT document, a remote attacker could execute arbitrary code with user privileges. Ubuntu 10.10 was not affected. CVE-2010-2935, CVE-2010-2936 Marc...

RHEL 5 : openoffice.org (RHSA-2011:0182)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0182 advisory. - OpenOffice.org: directory traversal flaws in handling of XSLT jar filter descriptions and OXT extension files CVE-2010-3450 -...

CVE-2010-4643

Heap-based buffer overflow in Impress in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Truevision TGA TARGA file in an ODF or Microsoft Office document...