117 matches found
RHEL 3 / 4 : openoffice.org (RHSA-2007:0001)
Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager,...
Mandrake Linux Security Advisory : libwmf (MDKSA-2006:132)
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file. Updated packages have been patched to correct...
GLSA-200608-17 : libwmf: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200608-17 libwmf: Buffer overflow vulnerability infamous41md discovered that libwmf fails to do proper bounds checking on the MaxRecordSize variable in the WMF file header. This could lead to an head-based buffer overflow. Impact ...
CVE-2006-4071
Sign extension vulnerability in the createBrushIndirect function in the GDI library gdi32.dll in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service application crash via a crafted WMF file...
CVE-2006-4071
Sign extension vulnerability in the createBrushIndirect function in the GDI library gdi32.dll in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service application crash via a crafted WMF file...
CVE-2006-4071
CVE-2006-4071 affects Microsoft Windows XP and Windows Server 2003 (gdi32.dll). Vulnerable component: createBrushIndirect in GDI; root cause: sign extension issue that allows a crafted WMF file to crash the application (user-assisted DoS). Impact: denial of service via crash. Exploitation details...
CVE-2006-3376
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...
CVE-2006-3376
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...
CVE-2006-3376
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...
ms0601wmf file remote code execution using the program invincible Edition-vulnerability warning-the black bar safety net
I haven't made an original, don't send going to be the ice blood it Ah to the SM:－the wmf File format vulnerability out for so long, only recently have time to study it. Presumably this vulnerability also attracted a lot of eyeballs. metasploit really cattle Ah, the launch of the Trojan are alway...
Integer overflow
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute code via a crafted WMF file with a manipulated WMF...
Code injection
Microsoft Windows Graphics Rendering Engine GRE allows remote attackers to corrupt memory and cause a denial of service crash via a WMF file containing 1 ExtCreateRegion or 2 ExtEscape function calls with arguments with inconsistent lengths...
CVE-2006-0143
Microsoft Windows Graphics Rendering Engine GRE allows remote attackers to corrupt memory and cause a denial of service crash via a WMF file containing 1 ExtCreateRegion or 2 ExtEscape function calls with arguments with inconsistent lengths...
CVE-2006-0143
The Connected advisory CPAI-2006-171 documents a denial-of-service flaw in Microsoft Windows’ Graphics Rendering Engine (GRE) when parsing certain WMF files. Specifically, a crafted WMF with ExtCreateRegion or ExtEscape calls can trigger a memory read/parse error in GRE, causing the host applicat...
Lotus Notes WMF File Handling Code Execution Vulnerability
Information about new vulnerability affecting to Lotus Notes has been released recently at http://www.nist.org/nistplugins/content/content.php?content.25 This issue is due to Shimgvw.dll graphics rendering engine being used when rendering picture files sent as a file attachment. Reportedly person...
Microsoft Windows vulnerable to buffer overflow via specially crafted WMF file
Overview Microsoft Windows may be vulnerable to remote code execution via a buffer overflow in the Windows Metafile image format handling. Description Windows Metafile WMF format images are metafiles that can contain both vector and bitmap-based information. Microsoft Windows contains routines fo...