OptiPNG BMP阅读器缓冲区溢出漏洞

BUGTRAQ ID: 32248 CVECAN ID: CVE-2008-5101 OptiPNG是PNG优化程序，可无损的将图形文件重新压缩到更小的尺寸。 OptiPNG的BMP阅读器在处理畸形BMP文件时存在缓冲区溢出漏洞。如果用户打开了带有畸形头的图形文件的话，就可以触发这个溢出，导致执行任意代码。 OptiPNG 0.6 Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200812-01）以及相应补丁: GLSA-200812-01：OptiPNG: User-assisted execution of arbitrary code...

OptiPNG buffer overflow

Buffer overflow on BMP images parsing...

[ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200812-01 : OptiPNG: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200812-01 OptiPNG: User-assisted execution of arbitrary code A buffer overflow in the BMP reader in OptiPNG has been reported. Impact : A remote attacker could entice a user to process a specially crafted BMP image, possibly...

OptiPNG: User-assisted execution of arbitrary code

Background OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information. Description A buffer overflow in the BMP reader in OptiPNG has been reported. Impact A remote attacker could entice a user to process a specially crafted BMP image, possibly...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

Buffer overflow

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

CVE-2008-5101

OptiPNG vulnerability CVE-2008-5101: A buffer overflow in the BMP reader of OptiPNG 0.6 and 0.6.1 can be triggered by a crafted BMP image, enabling user-assisted arbitrary code execution. OpenVAS/Nessus entries link this to BMP-induced heap/buffer overflow and note affected packages across OpenSU...

CVE-2008-5101

Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."...

Fedora 8 : optipng-0.6.2-1.fc8 (2008-9639)

The main reason for this update is a buffer overflow that is removed in this version, that could be triggered by processing specially crafted bitmap images .bmp. Aggregated upstream changelog: ============================== ++ Put back a speed optimization, accidentally removed in version 0.6,...

optipng -- arbitrary code execution via crafted BMP image

Secunia reports: A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into...

FastStone Image Viewer 3.6 (malformed bmp image) DoS Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

faststone-dos.txt

Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC:...

FastStone Image Viewer 3.6 (malformed bmp image) Crash Exploit

Exploit for unknown platform in category dos / poc ============================================================== FastStone Image Viewer 3.6 malformed bmp image Crash Exploit ============================================================== Name : FastStone Image Viewer v3.6 malformed bmp image DoS...

AyeView 2.20 (invalid bitmap header parsing) Crash Exploit

No description provided by source. Name : AyeView v2.20 invalid bitmap header parsing DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.ayeview.com/downloads.htm Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, str0ke, all...

FastStone Image Viewer 3.6 (malformed bmp image) Crash Exploit

No description provided by source. Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coder...

FastStone Image Viewer 3.6 - '.BMP' Image Crash

Name : FastStone Image Viewer v3.6 malformed bmp image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.FastStone.org Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC:...