CVE-2014-9330

CVE-2014-9330 is a LibTIFF vulnerability: an integer overflow in tif_packbits.c (bmp2tif) in libtiff 4.0.3 can be exploited by remote attackers via crafted BMP images to crash the process or trigger an out-of-bounds read. Multiple connected advisories reference this CVE, listing it among libtiff ...

CVE-2014-9330

Integer overflow in tifpackbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service crash via crafted BMP image, related to dimensions, which triggers an out-of-bounds read...

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

Information disclosure

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

CVE-2014-8637

CVE-2014-8637 affects Mozilla Firefox <35.0 and SeaMonkey

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

Embarcadero Delphi / C++ Builder VCL library buffer overflow

Buffer overflow on BMP parsing...

[CORE-2014-0006] - Delphi and C++ Builder VCL library Heap Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Delphi and C++ Builder VCL library Heap Buffer Overflow 1. Advisory Information Title: Delphi and C++ Builder VCL library Heap Buffer Overflow Advisory ID: CORE-2014-0006 Advisory URL:...

Heap overflow

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the...

CVE-2014-0994

CVE-2014-0994 affects Embarcadero Delphi XE6 and C++ Builder XE6 (VCL Graphics, ReadDIB in TPicture.Bitmap). A heap-based buffer overflow occurs when processing malformed BMP files, specifically via BITMAPINFOHEADER.biClrUsed, after an incomplete fix for CVE-2014-0993. The result is potential arb...

CVE-2014-0994

Heap-based buffer overflow in the ReadDIB function in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows context-dependent attackers to execute arbitrary code via the...

Delphi and C++ Builder VCL library Heap Buffer Overflow

1. Advisory Information Title: Delphi and C++ Builder VCL library Heap Buffer Overflow Advisory ID: CORE-2014-0006 Advisory URL:http://www.coresecurity.com/core-labs/advisories/delphi-and-c-builder-vcl-library-heap-buffer-overflow Date published: 2014-09-16 Date of last update: 2014-09-16 Vendors...

CVE-2014-0993

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file...

Buffer overflow

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file...

CVE-2014-0993

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library VCL in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote attackers to execute arbitrary code via a crafted BMP file...

CVE-2014-0993

Summary of CVE-2014-0993 / CVE-2014-0994 (Delphi/C++ Builder VCL BMP handling) Affected products: Embarcadero Delphi XE6 and C++ Builder XE6 (VCL Graphics, TPicture.Bitmap). The VCL ReadDIB/Bitmap handling processes BMP files and uses BITMAPINFOHEADER.biClrUsed to determine color table read size....

Embarcadero Delphi and C++Builder VCL BMP file processing buffer overflow

Overview Embarcadero Delphi and C++ Builder Visual Component Library VCL bitmap BMP file processing code contains a buffer overflow that could allow an attacker to execute arbitrary code. Description Embarcadero Delphi and C++ Builder tools contain a buffer overflow CWE-119 in VCL BMP file...

Delphi and C++ Builder VCL library Buffer Overflow

1. Advisory Information Title: Delphi and C++ Builder VCL library Buffer Overflow Advisory ID: CORE-2014-0004 Advisory URL:http://www.coresecurity.com/core-labs/advisories/delphi-and-c-builder-vcl-library-buffer-overflow Date published: 2014-08-20 Date of last update: 2014-08-20 Vendors contacted...

Adobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption

No description provided by source. ''' Title: Adobe Reader X BMP/RLE heap corruption Product: Adobe Reader X Version: 10.x Product Homepage: adobe.com Binary affected: AcroForm.api Binary Version: 10.1.4.38 Binary MD5: 8e0fc0c6f206b84e265cc3076c4b9841 Configuration Requirements...

KLA10181 ACE vulnerability in Sketchup

Multiple critical vulnerabilities have been found in Google SketchUp. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow can be exploited remotely via a specially designed BMP file; 2. The out of bounds wri...