Heap overflow

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

IrfanView - .RLE Image Decompression Buffer Overflow

IrfanView - .RLE Image Decompression Buffer Overflow Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number:...

IrfanView - '.RLE' Image Decompression Buffer Overflow

Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL: 2012-32 Author: Francis Provencher Prot...

Microsoft Paint 5.1 Memory Corruption

!/usr/bin/perl Title : Microsoft Paint 5.1 memory corruption Version : build 2600.xpsp Service Pack3 Date : 2012-10-21 Vendor : http://www.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Notice : for testing POC...

HCView WriteAV Crash Proof Of Concept

!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...

Fedora Update for optipng FEDORA-2012-14366

Check for the Version of optipng OpenVAS Vulnerability Test Fedora Update for optipng FEDORA-2012-14366 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Slackware Advisory SSA:2004-236-01 Qt

The remote host is missing an update as announced via advisory SSA:2004-236-01. OpenVAS Vulnerability Test $Id: esoftslkssa200423601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Design/Logic Flaw

Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff...

CVE-2012-3966

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a negative height value in a BMP image within a...

Memory corruption

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a negative height value in a BMP image within a...

CVE-2012-3966

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a negative height value in a BMP image within a...

Firefox 10.0.x < 10.0.7 Multiple Vulnerabilities

The installed version of Firefox 10.0.x is potentially affected by the following security issues : - Unspecified memory safety issues exist. CVE-2012-1970 - Multiple use-after-free errors exist. CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-395...

Scientific Linux Security Update : gimp on SL4.x i386/x86_64

The GIMP GNU Image Manipulation Program is an image composition and editing program. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially...

CentOS Update for autocorr-af CESA-2012:0705 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

autocorr, broffice.org, openoffice.org security update

CentOS Errata and Security Advisory CESA-2012:0705 Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

openoffice.org security update

1:3.2.1-19.6.0.1.el62.7 - Replaced RedHat colors with Oracle colors, OOOVENDOR with Oracle Corp., and the filename redhat.soc with oracle.soc in specfile 1:3.2.1-19.6.7 - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in th...

Important: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...

Design/Logic Flaw

MediaChance Real-DRAW PRO 5.2.4 allows remote attackers to cause a denial of service application crash via a crafted 1 PNG, 2 WMF, 3 PSD, 4 TGA, 5 TTF, 6 BMP, 7 TIFF, or 8 PCX file...

CVE-2012-2940

MediaChance Real-DRAW PRO 5.2.4 is affected. The CVE-2012-2940 entry describes a denial of service (application crash) triggered by processing crafted image files in multiple formats (PNG, WMF, PSD, TGA, TTF, BMP, TIFF, PCX) remotely. The connected documents corroborate the same description acros...