CVE-2008-4069

The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitialized memory, and possibly obtain sensitive information in opportunistic circumstances, via a crafted XBM image file...

SeaMonkey < 1.1.12 Multiple Vulnerabilities

The installed version of SeaMonkey is affected by various security issues : - Using a specially crafted UTF-8 URL in a hyperlink, an attacker might be able to exploit a stack buffer overflow in the Mozilla URL parsing routes to execute arbitrary code. MFSA 2008-37 - It is possible to bypass the...

XBM image uninitialized memory reading — Mozilla

Security researcher Billy Hoffman discovered a bug in the XBM decoder that allowed random small chunks of uninitialized memory to be read. The severity of this bug was low and did not appear to cause any memory corruption...

From ACDSee vulnerability see Trojan intrusion of new ideas-vulnerability warning-the black bar safety net

For ACDSee name, surely you are no stranger. However, recent ACDSee the use of the IDX. apl and IDEACDStd. apl, IDPSP. ap and AMLHA. apl plug-ins in the processing of XBM/XPM/PSP/LHA file buffer overflow vulnerability if a user opens with a long string of XBM/XPM/PSP/LHA file, then it is possible...

[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...

RHEL 3 / 4 / 5 : ImageMagick (RHSA-2008:0145)

Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2008:0145 Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagic...

CentOS 4 / 5 : gd (CESA-2008:0146)

Updated gd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images suc...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

Buffer overflow

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager (versions 8.1, 9.0, 10.0) allows a user-assisted remote attacker to execute arbitrary code via a malformed XBM file. The issue arises during XBM processing and may be related to CVE-2007-6009. No remediation or exploit details are provided in the connected ...

CVE-2007-6009

Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a 1 XBM or 2 XPM file to a IDX.apl or b IDEACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be...

Integer overflow

Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a 1 XBM or 2 XPM file to a IDX.apl or b IDEACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be...

CVE-2007-6009

Multiple buffer overflows in ACD products allow user-assisted remote attackers to execute arbitrary code via a long section string in a 1 XBM or 2 XPM file to a IDX.apl or b IDEACDStd.apl. NOTE: the PSP and LHA vectors are already covered by CVE-2007-4344 and CVE-2007-6007. NOTE: these might be...

CVE-2007-6009

CVE-2007-6009 is a buffer-overflow vulnerability in ACDSee plug-ins used to process XPM files. Connected sources confirm a boundary/section-string overflow in ID_X.apl, IDE_ACDStd.apl, ID_PSP.apl, and AM_LHA.apl that could allow remote code execution when a user opens a crafted XPM file, with suc...

Ubuntu 6.06 LTS / 6.10 / 7.04 : gimp vulnerability (USN-494-1)

Sean Larsson discovered multiple integer overflows in Gimp. By tricking a user into opening a specially crafted DICOM, PNM, PSD, PSP, RAS, XBM, or XWD image, a remote attacker could exploit this to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted...

Ubuntu 6.06 LTS / 6.10 / 7.04 : imagemagick vulnerabilities (USN-523-1)

Multiple vulnerabilities were found in the image decoders of ImageMagick. If a user or automated system were tricked into processing a malicious DCM, DIB, XBM, XCF, or XWD image, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted...

Mandrake Linux Security Advisory : gimp (MDKSA-2007:170)

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files. CVE-2006-4519 Integer overflow in the seektoandunpackpixeldata...

USN-494-1: Gimp vulnerability

Sean Larsson discovered multiple integer overflows in Gimp. By tricking a user into opening a specially crafted DICOM, PNM, PSD, PSP, RAS, XBM, or XWD image, a remote attacker could exploit this to execute arbitrary code with the user's privileges...