OptiPNG buffer overflow

Buffer overflow on BMP images parsing...

[ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200812-01 : OptiPNG: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-01 OptiPNG: User-assisted execution of arbitrary code A buffer overflow in the BMP reader in OptiPNG has been reported. Impact : A remote attacker could entice a user to process a specially crafted BMP image, possibly...

OptiPNG: User-assisted execution of arbitrary code

Background OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. Description A buffer overflow in the BMP reader in OptiPNG has been reported. Impact A remote attacker could entice a user to process a specially crafted BMP image, possibly...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

Buffer overflow

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

OptiPNG vulnerability CVE-2008-5101: A buffer overflow in the BMP reader of OptiPNG 0.6 and 0.6.1 can be triggered by a crafted BMP image, enabling user-assisted arbitrary code execution. OpenVAS/Nessus entries link this to BMP-induced heap/buffer overflow and note affected packages across OpenSU...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

Fedora 8 : optipng-0.6.2-1.fc8 (2008-9639)

The main reason for this update is a buffer overflow that is removed in this version, that could be triggered by processing specially crafted bitmap images .bmp. Aggregated upstream changelog: ============================== ++ Put back a speed optimization, accidentally removed in version 0.6,...

optipng -- arbitrary code execution via crafted BMP image

Secunia reports: A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into...

FastStone Image Viewer 3.6 (malformed bmp image) DoS Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

faststone-dos.txt

Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC:...

FastStone Image Viewer 3.6 (malformed bmp image) Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================== FastStone Image Viewer 3.6 malformed bmp image Crash Exploit ============================================================== Name : FastStone Image Viewer v3.6 malformed bmp image DoS...

AyeView 2.20 (invalid bitmap header parsing) Crash Exploit

No description provided by source. Name : AyeView v2.20 invalid bitmap header parsing DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.ayeview.com/downloads.htm Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, str0ke, all...

FastStone Image Viewer 3.6 (malformed bmp image) Crash Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

FastStone Image Viewer 3.6 - '.BMP' Image Crash

Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC:...

Microsoft GDI+pictures loophole details-vulnerability warning-the black bar safety net

What is GDI+: the GDI+ is a Graphics Device Interface to applications and programmers to provide a two-dimensional vector graphics, imaging, and typography. Vulnerability impact: Microsoft products are used in the GDI+library GdiPlus.dll through class-based API provides a variety of graphical way...