CVE-2026-112277

A flaw was found in rdesktop. A remote malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending malformed compressed bitmap data. By specifying large image dimensions alongside an unexpectedly short compressed payload, the server causes an out-of-bounds read past...

CVE-2013-7388

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689, allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and...

Heap overflow

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689, allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and...

CVE-2013-7388

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689, allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and...

CVE-2013-7388: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689, allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and...

PT-2014-3412

Name of the Vulnerable Software and Affected Versions Trimble SketchUp versions prior to 13.0.3689 Description A heap-based buffer overflow issue in paintlib allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. Recommendations For versions prior to 13.0.3689...

CVE-2012-5904

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

CVE-2012-5904

CVE-2012-5904 describes a heap-based buffer overflow in IrfanView prior to 4.33 that can be triggered by processing a crafted RLE-compressed bitmap (DIB/RLE/BMP). The issue allows remote code execution and arises from the way the application handles RLE bitmap data. Public references (NVD, CVE li...

CVE-2012-5904: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in IrfanView before 4.33 allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file such as a DIB, RLE, or BMP image...

PT-2012-6185

Name of the Vulnerable Software and Affected Versions IrfanView versions prior to 4.33 Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted RLE compressed bitmap file, such as a DIB, RLE, or BMP image. Recommendations For versions prior to...

Heap overflow

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted 1 height and 2 width values for an RLE8 compressed bitmap, which trigger...

CVE-2011-0596: Improper Input Validation

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted 1 height and 2 width values for an RLE8 compressed bitmap, which trigger...