dcraw 输入验证错误漏洞

dcraw is a set of open source tools for converting camera-shot RAW film into PPM or TIFF format images. A security vulnerability exists in dcraw, which stems from an integer overflow vulnerability. An attacker could execute arbitrary code on the victim's system via a maliciously crafted X3F input...

dcraw -- integer overflow condition

ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition which lead to a buffer overflow. The vulnerability concerns the 'len' variable, parsed without validation from opened images, used in the ljpegstart function. A malicious...

CVE-2010-1846

Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted RAW image...