2484 matches found
Batch Picture Watemark 1.0 (.jpg File) Local Crash PoC
Exploit for unknown platform in category dos / poc ====================================================== Batch Picture Watemark 1.0 .jpg File Local Crash PoC ====================================================== Anti-Security Research Team & Security Institute + Bug : Batch Picture Watemark v1....
openssl: ASN1 printing crash
The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...
openSUSE Security Update : optipng (optipng-572)
Specially crafted BMP files could overflow a buffer in optipng CVE-2008-5101, specially crafted GIF files could crash optipng CVE-2009-0749. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Phorum 'image/bmp' MIME Type HTML Injection Vulnerability
According to its version number, the remote version of Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...
FreeBSD : imlib2 -- BMP decoder buffer overflow (ba005226-fb5b-11d8-9837-000c41e2cdad)
Marcus Meissner discovered that imlib2's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability. There appears to be both a stack-based and a heap-based buffer overflow that are believed to be exploitable for arbitrary code executio...
FreeBSD : imlib -- BMP decoder heap buffer overflow (00644f03-fb58-11d8-9837-000c41e2cdad)
Marcus Meissner discovered that imlib's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability. It is believed that this bug could be exploited for arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
QuickTime < 7.6.6 Multiple Vulnerabilities
Binary data 5492.prm...
QuickTime < 7.6.6 Multiple Vulnerabilities
Binary data 801207.prm...
Ubuntu Update for xmms vulnerabilities USN-445-1
Ubuntu Update for Linux kernel vulnerabilities USN-445-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4451.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xmms vulnerabilities USN-445-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-445-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-582-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 9 Update: optipng-0.6.2.1-1.fc9
OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. This program also converts external formats BMP, GIF, PNM and TIFF to optimized PNG, and performs PNG integrity checks and corrections...
DEBIAN-CVE-2008-6079
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted 1 ARGB, 2 BMP, 3 JPEG, 4 LBM, 5 PNM, 6 TGA, or 7 XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."...
FreeBSD : optipng -- arbitrary code execution via crafted BMP image (2bc960c4-e665-11dd-afcd-00e0815b8da8)
Secunia reports : A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into...
FreeBSD Ports: optipng
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-5870
FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942...
Design/Logic Flaw
FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942...
CVE-2008-5870
FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service application crash via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942...
CVE-2008-5870
The CVE-2008-5870 entry concerns FastStone Image Viewer 3.6. It describes a vulnerability where a user-assisted attacker can cause an application crash (denial of service) by supplying a malformed BMP image with very large width and height values, with the issue noted as possibly related to CVE-2...
OptiPNG BMP阅读器缓冲区溢出漏洞
BUGTRAQ ID: 32248 CVECAN ID: CVE-2008-5101 OptiPNG是PNG优化程序,可无损的将图形文件重新压缩到更小的尺寸。 OptiPNG的BMP阅读器在处理畸形BMP文件时存在缓冲区溢出漏洞。如果用户打开了带有畸形头的图形文件的话,就可以触发这个溢出,导致执行任意代码。 OptiPNG 0.6 Gentoo ------ Gentoo已经为此发布了一个安全公告(GLSA-200812-01)以及相应补丁: GLSA-200812-01:OptiPNG: User-assisted execution of arbitrary code...