CVE-2008-1102

Stack-based buffer overflow in the imbloadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image...

Code injection

Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...

CVE-2007-6715

Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...

CVE-2007-6715

Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...

CVE-2007-6715

Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...

CVE-2007-6715

Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...

Infinite loops in ImageMagick's XCF and DCM coders

ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers 1 an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or 2 an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong...

Heap overflow in ImageMagick's DCM and XWD coders

Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via 1 a crafted DCM image, which results in a heap-based overflow in the ReadDCMImage function, or 2 the a colors or b comments field in a crafted XWD image, which results in a heap-based...

CVE-2007-6715: Undefined Security Weakness

Mozilla Firefox allows remote attackers to cause a denial of service crash via crafted image, as demonstrated by the zzuf lol-firefox.gif test case...

Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (948590)

Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 948590 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of these...

PT-2008-2681 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000 SP4 through Server 2008 Description: A heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI allows remote attackers to execute arbitrary code via an EMF or WMF image file with a malformed...

Design/Logic Flaw

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service crash via a crafted 1 bitmap BMP or 2 GIF file, a related issue to CVE-2008-0420...

CVE-2008-0078

Unspecified vulnerability in an ActiveX control dxtmsft.dll in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."...

CVE-2008-0078: Improper Control of Generation of Code

Unspecified vulnerability in an ActiveX control dxtmsft.dll in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."...

CVE-2008-0036

CVE-2008-0036 : Buffer overflow in Apple QuickTime prior to 7.4 allows remote attackers to execute arbitrary code via a crafted compressed PICT image, triggering during decoding. Affected software: Apple QuickTime before 7.4. Root cause: overflow during decoding of the crafted PICT data. Impact i...

CVE-2007-6352

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...

CVE-2007-5503

Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the readpng function...

Memory corruption

Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to "memory corruption."...

CVE-2007-2395

Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to "memory corruption."...

CVE-2007-2217

CVE-2007-2217 affects Kodak Image Viewer in Windows 2000 SP4 and, in some cases, XP SP2 and Server 2003 SP1/SP2. The issue is a memory-corruption/buffer overflow in TIFF handling that allows remote code execution when a user opens a specially crafted TIFF image. Microsoft issued MS07-055 with the...