Adobe Photoshop CS2 / CS3 - '.bmp' Local Buffer Overflow

/\ Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow There is a buffer overflow in Adobe products that can be triggered while processing a malformed BMP, DIB or RLE file. This sploit runs calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu / include...

多个产品BMP拒绝服务漏洞

ACDSee, IrfranView和FastStone image viewer是图片管理处理程序。 ACDSee, IrfranView和FastStone image viewer处理畸形BMP文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 FastStone Image Viewer 2.9 目前没有解决方案提供： http://www.irfanview.com/ http://www.acdsee.com...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2007-1942

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp...

CVE-2007-1943

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp...

CVE-2007-1948

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

Integer overflow

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp...

Integer overflow

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp...

Buffer overflow

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

Integer overflow

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2007-1946

CVE-2007-1946 is described as an integer overflow in Windows Explorer on Windows XP SP1 that could allow denial of service and possibly arbitrary code execution via a crafted BMP image (w4intof.bmp). The connected OpenVAS and FreeBSD VuXML entries reference BMP/image parsing-related overflow issu...

CVE-2007-1943

CVE-2007-1943 affects ACDSee Photo Manager 9.0, where an integer overflow occurs while processing BMP images with large widths. This context-dependent vulnerability can cause a denial of service and potentially allow arbitrary code execution, as demonstrated by crafted BMP files (e.g., w3intof.bm...

CVE-2007-1942

FastStone Image Viewer 2.9 is affected by CVE-2007-1942 due to an integer overflow while processing BMP images. The vulnerability allows a context‑dependent attacker to cause a denial of service and potentially execute arbitrary code, as demonstrated by crafted BMPs wh3intof.bmp and wh4intof.bmp....

CVE-2007-1942

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp...

CVE-2007-1943

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp...

CVE-2007-1948

Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the 1 xoffset or 2 yoffset RLE command, or 3 large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp...

IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities

IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/23318/info IrfanView is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issue...

p5-Imager -- possibly exploitable buffer overflow

Imager 0.56 and all earlier versions with BMP support have a security issue when reading compressed 8-bit per pixel BMP files where either a compressed run of data or a literal run of data overflows the scan-line. Such an overflow causes a buffer overflow in a malloc allocated memory buffer,...

ACDSee 9.0 Photo Manager - Multiple .BMP Denial of Service Vulnerabilities

ACDSee 9.0 Photo Manager - Multiple .BMP Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/23317/info ACDSee 9.0 Photo Manager is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successful...