SuSE 10 Security Update : libgdiplus (ZYPP Patch Number 7130)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - gdiploadtiffimage by processing specially crafted TIFF images - gdiploadjpegimageinternal by processing specially crafted JPEG images -...

openSUSE Security Update : libgdiplus0 (openSUSE-SU-2010:0665-1)

This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - 'gdiploadtiffimage' by processing specially crafted TIFF images - 'gdiploadjpegimageinternal' by processing specially crafted JPEG images -...

Microsoft Mspaint - '.bmp' Crash (PoC)

Exploit Title: Bmp crash , microsft paint Date: 187/09/2010 Author: andrew hayn Software Link: Version: winxp/sp3 Tested on: winxp/sp2/sp3 BMP File: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15034.zip...

Mandriva Update for libgdiplus MDVSA-2010:166 (libgdiplus)

Check for the Version of libgdiplus OpenVAS Vulnerability Test Mandriva Update for libgdiplus MDVSA-2010:166 libgdiplus Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for libgdiplus MDVSA-2010:166 (libgdiplus)

Check for the Version of libgdiplus OpenVAS Vulnerability Test Mandriva Update for libgdiplus MDVSA-2010:166 libgdiplus Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[ MDVSA-2010:166 ] libgdiplus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:166 http://www.mandriva.com/security/ Package : libgdiplus Date : August 31, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and...

CVE-2010-1526

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

Integer overflow

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

CVE-2010-1526

Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...

Software Index (Remote File Upload) Exploit

Exploit for php platform in category web applications =========================================== Software Index Remote File Upload Exploit =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Heap overflow

Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...

CVE-2010-0991

CVE-2010-0991 affects imlib2 1.4.3, where heap-based buffer overflows can be triggered by crafted ARGB, XPM, or BMP files due to a logic error in the IMAGE_DIMENSIONS_OK macro in lib/image.h. This has been documented across multiple sources; some advisories note the issue and reference a fix in l...

openSUSE Security Update : gimp (openSUSE-SU-2010:0115-1)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files CVE-2009-1570, CVE-2009-3909. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : gimp (openSUSE-SU-2010:0115-1)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files CVE-2009-1570, CVE-2009-3909. Gimp was updated to to version 2.6.8 which fixes those issues. %NASLMINLEVEL 70300 C...

Debian DSA-2029-1 : imlib2 - several vulnerabilities

It was discovered that imlib2, a library to load and process several image formats, did not properly process various image file types. Several heap and stack based buffer overflows - partly due to integer overflows - in the ARGB, BMP, JPEG, LBM, PNM, TGA and XPM loaders can lead to the execution ...

Apple QuickTime Multiple Denial Of Service Vulnerabilities (Windows)

The host is installed with Apple QuickTime and is prone to multiple Denial Of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultdosvulnwin.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple QuickTime Multiple Denial Of Service Vulnerabilities Windows Authors: Antu Sanadi...

CVE-2010-0536

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted BMP image...

Memory corruption

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted BMP image...

CVE-2010-0536

Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted BMP image...

QuickTime < 7.6.6 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.6.6. Such versions contain several vulnerabilities : - A heap-based buffer overflow in QuickTime's handling of PICT images may lead to an application crash or arbitrary code execution. CVE-2009-2837 - A memory corruptio...