openoffice.org: integer overflow in XPM processing

Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svtxpmread.cxx in OpenOffice.org OOo before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that correct multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes...

openoffice.org security update

1.1.5-10.0.7.3 - Resolves: rhbz529748 openoffice.org various flaws - CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption - CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption 1.1.5-10.0.7.2 - Resolves: rhbz529748 openoffice.org various flaws - CVE-2009-2950 GIF file...

CVE-2009-4274

Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a large color index val...

Sun OpenOffice.org < 3.2 Multiple Vulnerabilities

The version of Sun Microsystems OpenOffice.org installed on the remote host is prior to version 3.2. It is, therefore, affected by several issues : - Signatures may not be handled properly due to a vulnerability in the libxml2 library. CVE-2006-4339 - There is an HMAC truncation authentication...

ACD Systems ACDSee Products XPM File Handling Buffer Overflow (CVE-2007-2193)

ACDSee is an image viewer software for Windows developed by ACD Systems. Besides the usual thumbnail viewing of folders and file type conversion, key features of ACDSee include slideshow presentations, CD/DVD burning, HTML gallery creation, image folder syncing and editing/indexing of image...

ACD Systems ACDSee Products XPM Values Section Buffer Overflow (CVE-2007-6009)

ACDSee is an image viewer software for Windows developed by ACD Systems. Besides the usual thumbnail viewing of folders and file type conversion, key features of ACDSee include slideshow presentations, CD/DVD burning, HTML gallery creation, image folder syncing and editing/indexing of image...

ACDSee XPM File Section Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ACDSee XPM File...

SuSE9 Security Update : gdk-pixbuf (YOU Patch Number 9368)

Three security vulnerabilities have been found in the loader for XPM images of the GTK library. These issues are : - Potential heap overflow in pixbufcreatefromxpm. CVE-2004-0782 - Potential stack overflow in xpmextractcolor. CVE-2004-0783 - Potential integer overflow in the ICO icon format loade...

openSUSE Security Update : imlib2 (imlib2-318)

A security problem was fixed in imlib2 where loading a specific XPM file could corrupt memory. CVE-2008-5187 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update imlib2-318. The text description of...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2008:123)

Stefan Cornelius discovered two buffer overflows in Imlib's image loaders for PNM and XPM images, which could possibly result in the execution of arbitrary code CVE-2008-2426. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Linux Security Advisory : imlib2 (MDVSA-2009:019)

A vulnerability have been discovered in the load function of the XPM loader for imlib2, which allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file CVE-2008-5187. The updated packages have been patched to prevent this. %NASLMINLEVEL 70300 C...

IrfanView FORMATS插件XPM格式处理整数溢出漏洞

BUGTRAQ ID: 34402 CVECAN ID: CVE-2009-0197 IrfanView是一款快速、免费的图像查看器、浏览器、转换器。 IrfanView的Formats插件在处理设置有某些维度的XPM文件时存在可导致堆溢出的整数溢出漏洞。如果用户受骗打开了特制的XPM文件就可以出发这个溢出，导致以当前用户权限执行任意代码。 IrfanView Formats 4.22 IrfanView --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.irfanview.net/...

CVE-2009-0197

Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large XPM file that triggers a heap-based buffer overflow...

Integer overflow

Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large XPM file that triggers a heap-based buffer overflow...

CVE-2009-0197

Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large XPM file that triggers a heap-based buffer overflow...

CVE-2009-0197

Integer overflow in the FORMATS Plugin before 4.23 for IrfanView allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large XPM file that triggers a heap-based buffer overflow...

IrfanView integer overflow

Integer overflow on XPM image parsing...

DEBIAN-CVE-2008-6079

imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted 1 ARGB, 2 BMP, 3 JPEG, 4 LBM, 5 PNM, 6 TGA, or 7 XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."...

Mandrake Security Advisory MDVSA-2009:019 (imlib2)

The remote host is missing an update to imlib2 announced via advisory MDVSA-2009:019. OpenVAS Vulnerability Test $Id: mdksa2009019.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:019 imlib2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...