CVE-2007-3568

The LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service infinite loop via a BMP image with a Bits Per Page BPP value of 0...

CVE-2007-3568

The CVE-2007-3568 issue affects the imlib library (versions 1.9.15 and older). A context-dependent denial-of-service can be triggered by rendering a BMP with Bits Per Page value 0, causing an infinite loop. Fedora/SUSE advisories indicate a fix in updated packages (e.g., imlib-1.9.15-6.fc7/ -6.fc...

ImLib BMP Image _LoadBMP函数拒绝服务漏洞

ImLib是一款允许X11程序使用各种文件格式图象的库。 ImLib处理畸形BMP文件存在问题，远程攻击者可以利用漏洞对链接此库的应用程序进行拒绝服务攻击。 问题存在于Image LoadBMP函数中，攻击者可以构建恶意BMP文件来触发。 Imlib 1.9.15 目前没有详细漏洞解决方案提供： http://freshmeat.net/projects/imlib/...

ImLib库_LoadBMP函数拒绝服务漏洞

BUGTRAQ ID: 24750 Imlib是一种图形浏览应用文件库，用于Gnome图形用户环境。 Imlib在处理畸形格式的BMP图像文件时存在漏洞，攻击者可能利用此漏洞导致使用了程序库的应用陷入死循环。 Imlib库的LoadBMP函数从BMP文件读取了BPP值并使用该值确定在主文件处理循环中的每一步应读取多少位，但以下行没有正确地检测无效的值0x0000： if bpp != 1 && bpp != 4 && bpp != 8 && bpp && 16 && bpp != 24 && bpp != 32 fprintfstderr, "IMLIB ERROR: unknown...

emul-linux-x86-java: Multiple vulnerabilities

Background emul-linux-x86-java is the 32 bit version of the Sun's J2SE Development Kit. Description Chris Evans of the Google Security Team has discovered an integer overflow in the ICC parser, and another vulnerability in the BMP parser. An unspecified vulnerability involving an "incorrect use o...

GLSA-200705-23 : Sun JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200705-23 Sun JDK/JRE: Multiple vulnerabilities An unspecified vulnerability involving an 'incorrect use of system classes' was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security Team reporte...

Sun JRE / JDK multiple security vulnerabilities

Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...

Sun JDK/JRE: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description An unspecified vulnerability involving an "incorrect use of system classes" was reported by the Fujitsu security team. Additionally, Chris Evans from the Google Security...

CVE-2007-2789

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

Code injection

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

CVE-2007-2789

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

CVE-2007-2789

The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...

Sun JDK JPG/BMP解析存在多个漏洞

Sun JDK存在多个安全问题，攻击者可以利用漏洞使应用程序崩溃，也可能执行任意指令。 Sun JDK解析特殊构建的JPG/BMP文件存在问题，目前没有详细漏洞细节提供。 Sun JDK 1.5 07-b03 JDK 1.5.011-b03和1.6.001-b06不受此漏洞影响： http://java.sun.com/ 攻击者可以参考如下测试文件： http://www.securityfocus.com/data/vulnerabilities/exploits/24004.bmp...

CVE-2007-2565

Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service application crash via a crafted BMP file...

CVE-2007-2565

CVE-2007-2565 affects Cdelia Software ImageProcessing. The vulnerability arises when processing a PNG? Actually BMP files; a crafted BMP file can trigger user‑accounted remote denial of service, crashing the application. The available data confirms the impact is a denial of service via a crafted ...

CVE-2007-2565

Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service application crash via a crafted BMP file...

Adobe Photoshop CS2 / CS3 Unspecified . BMP File Buffer Overflow-vulnerability warning-the black bar safety net

Ghost boy note: with the last, like, CS3 under the test is successful, but the CS2 is not the test, I had previously been with the CS green version, too lazy to go to the next CS2 test. Source: Security vulnerabilities /\ Adobe Photoshop CS2 / CS3 Unspecified . BMP File Buffer Overflow There is a...

Heap overflow

Heap-based buffer overflow in the BMP reader bmp.c in Imager perl module libimager-perl 0.45 through 0.56 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files...

CVE-2007-2459

Heap-based buffer overflow in the BMP reader bmp.c in Imager perl module libimager-perl 0.45 through 0.56 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files...

DEBIAN-CVE-2007-2459

Heap-based buffer overflow in the BMP reader bmp.c in Imager perl module libimager-perl 0.45 through 0.56 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files...