Mandrake Linux Security Advisory : gimp (MDKSA-2007:170)

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files. CVE-2006-4519 Integer overflow in the seektoandunpackpixeldata...

CVE-2007-3741

The CVE-2007-3741 entry relates to The GIMP, specifically its image loaders in the psp (aka .tub), bmp, pcx, and psd plugins. The vulnerability allows user-assisted remote attackers to cause a denial of service (crash or memory consumption) by feeding crafted image files, as identified using fuzz...

BMP image parser vulnerability

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...

CVE-2007-3568

The LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service infinite loop via a BMP image with a Bits Per Page BPP value of 0...

CVE-2007-3568

The LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service infinite loop via a BMP image with a Bits Per Page BPP value of 0...

CVE-2007-3568

The CVE-2007-3568 issue affects the imlib library (versions 1.9.15 and older). A context-dependent denial-of-service can be triggered by rendering a BMP with Bits Per Page value 0, causing an infinite loop. Fedora/SUSE advisories indicate a fix in updated packages (e.g., imlib-1.9.15-6.fc7/ -6.fc...

ImLib BMP Image _LoadBMP函数拒绝服务漏洞

ImLib是一款允许X11程序使用各种文件格式图象的库。 ImLib处理畸形BMP文件存在问题，远程攻击者可以利用漏洞对链接此库的应用程序进行拒绝服务攻击。 问题存在于Image LoadBMP函数中，攻击者可以构建恶意BMP文件来触发。 Imlib 1.9.15 目前没有详细漏洞解决方案提供： http://freshmeat.net/projects/imlib/...

ImLib库_LoadBMP函数拒绝服务漏洞

BUGTRAQ ID: 24750 Imlib是一种图形浏览应用文件库，用于Gnome图形用户环境。 Imlib在处理畸形格式的BMP图像文件时存在漏洞，攻击者可能利用此漏洞导致使用了程序库的应用陷入死循环。 Imlib库的LoadBMP函数从BMP文件读取了BPP值并使用该值确定在主文件处理循环中的每一步应读取多少位，但以下行没有正确地检测无效的值0x0000： if bpp != 1 && bpp != 4 && bpp != 8 && bpp && 16 && bpp != 24 && bpp != 32 fprintfstderr, "IMLIB ERROR: unknown...

emul-linux-x86-java: Multiple vulnerabilities

Background emul-linux-x86-java is the 32 bit version of the Sun's J2SE Development Kit. Description Chris Evans of the Google Security Team has discovered an integer overflow in the ICC parser, and another vulnerability in the BMP parser. An unspecified vulnerability involving an "incorrect use o...

GLSA-200705-23 : Sun JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200705-23 Sun JDK/JRE: Multiple vulnerabilities An unspecified vulnerability involving an 'incorrect use of system classes' was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security Team reporte...

Sun JRE / JDK multiple security vulnerabilities

Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...

Sun JDK/JRE: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description An unspecified vulnerability involving an "incorrect use of system classes" was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security...

CVE-2007-2789

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

Code injection

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

CVE-2007-2789

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

CVE-2007-2789

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

Sun JDK JPG/BMP解析存在多个漏洞

Sun JDK存在多个安全问题，攻击者可以利用漏洞使应用程序崩溃，也可能执行任意指令。 Sun JDK解析特殊构建的JPG/BMP文件存在问题，目前没有详细漏洞细节提供。 Sun JDK 1.5 07-b03 JDK 1.5.011-b03和1.6.001-b06不受此漏洞影响： http://java.sun.com/ 攻击者可以参考如下测试文件： http://www.securityfocus.com/data/vulnerabilities/exploits/24004.bmp...

CVE-2007-2565

Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service application crash via a crafted BMP file...

CVE-2007-2565

CVE-2007-2565 affects Cdelia Software ImageProcessing. The vulnerability arises when processing a PNG? Actually BMP files; a crafted BMP file can trigger user‑accounted remote denial of service, crashing the application. The available data confirms the impact is a denial of service via a crafted ...