Ubuntu 5.04 / 5.10 / 6.06 LTS : tiff vulnerabilities (USN-330-1)

Tavis Ormandy discovered that the TIFF library did not sufficiently check handled images for validity. By tricking an user or an automated system into processing a specially crafted TIFF image, an attacker could exploit these weaknesses to execute arbitrary code with the target application's...

Fedora 7 : openoffice.org-2.2.1-18.2.fc7 (2007-2372)

This security updates addresses CVE-2007-2834 a flaw in how openoffice.org handles corrupt TIFF graphic format file headers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Multiple image viewers multiple security vulnerabilities

Multiple buffer overflows on BPM, TIFF, XPM, CLP, PSP, RAS, IFF, PNG images parsing...

Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)

No description provided by source. / MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right...

kodak-exec.txt

/ MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right. Hwang-Hee listend their story, and...

Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC (MS07-055)

Exploit for unknown platform in category local exploits ================================================================= Kodak Image Viewer TIF/TIFF Code Execution Exploit PoC MS07-055 ================================================================= / MS07-055 Kodak Image Viewer TIF/TIFF Code...

Kodak Image Viewer - TIF/TIFF Code Execution (MS07-055)

/ MS07-055 Kodak Image Viewer TIF/TIFF Code Execution Proof Of Concept by Hong Gil-Dong, Jeon Woo-chi Hwang-Hee?1542, Prime Minister in Korea Once upon a time, One servant of Hwang-Hee was arguing with another servant. they asked Hwang-Hee to judge who is right. Hwang-Hee listend their story, and...

Update Protection against Microsoft Windows Kodak Image Viewer Code Execution Vulnerability (MS07-055)

A buffer overflow vulnerability has been identified in Microsoft Windows Kodak Image Viewer. Kodak Image Viewer is the picture viewer of Microsoft Windows. It deals with various types of popular graphic document formats, including the Tagged Image File Format TIFF. A remote attacker could exploit...

Update Protection against OpenOffice TIFF File Parsing Integer Overflow Vulnerability

An integer overflow vulnerability has been identified in the OpenOffice software suite. OpenOffice is an open source office suite that is capable of processing several types of graphic document formats, including the Tagged Image File Format TIFF. A remote attacker could exploit this issue via a...

GLSA-200710-24 : OpenOffice.org: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-24 OpenOffice.org: Heap-based buffer overflow iDefense Labs reported that the TIFF parsing code uses untrusted values to calculate buffer sizes, which can lead to an integer overflow resulting in heap-based buffer overflow...

OpenOffice.org: Heap-based buffer overflow

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description iDefense Labs reported that the TIFF parsing code uses untrusted values to calculate...

openSUSE 10 Security Update : imlib2-loaders (imlib2-loaders-2244)

Various security problems have been fixed in the imlib2 image loaders : CVE-2006-4809: A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4808: A heap buffer overflow in loadertga.c could potentially be used by...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4319)

This update of OpenOfficeorg fixes a bug in TIFF parsing code that leads to a heap overflow. CVE-2007-2834 This bug can be exploited with user assistance to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : tiff (tiff-1594)

This update fixes a stack-based buffer overflow in tiffsplit that can be triggered with long filemanes CVE-2006-2656 and a buffer overflow in tiff2pdf. Both tools are not setuid but may be exploited in conjunction with other applications. Exploitation very unlikely. %NASLMINLEVEL 70300 C Tenable...

openSUSE 10 Security Update : imlib2-loaders (imlib2-loaders-2265)

Various security problems have been fixed in the imlib2 image loaders : CVE-2006-4809: A stack-based buffer overflow in loaderpnm.c could be used by attackers to execute code by supplying a handcrafted PNM image. CVE-2006-4808: A heap buffer overflow in loadertga.c could potentially be used by...

Kodak Image Viewer TIFF image handling vulnerability

Added: 10/15/2007 CVE: CVE-2007-2217 BID: 25909 OSVDB: 37627 Background The Windows Kodak Image Viewer is a utility for rendering various image formats. It is included in Windows 2000, and may also be present on newer versions of Windows if a computer was upgraded from Windows 2000. Problem A...

Kodak Image Viewer TIFF image handling vulnerability

Added: 10/15/2007 CVE: CVE-2007-2217 BID: 25909 OSVDB: 37627 Background The Windows Kodak Image Viewer is a utility for rendering various image formats. It is included in Windows 2000, and may also be present on newer versions of Windows if a computer was upgraded from Windows 2000. Problem A...

Kodak Image Viewer TIFF image handling vulnerability

Added: 10/15/2007 CVE: CVE-2007-2217 BID: 25909 OSVDB: 37627 Background The Windows Kodak Image Viewer is a utility for rendering various image formats. It is included in Windows 2000, and may also be present on newer versions of Windows if a computer was upgraded from Windows 2000. Problem A...

Kodak Image Viewer TIFF image handling vulnerability

Added: 10/15/2007 CVE: CVE-2007-2217 BID: 25909 OSVDB: 37627 Background The Windows Kodak Image Viewer is a utility for rendering various image formats. It is included in Windows 2000, and may also be present on newer versions of Windows if a computer was upgraded from Windows 2000. Problem A...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...