30 matches found
CVE-2021-26236
FastStone Image Viewer v.= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality BITMAPINFOHEADER Structure, 'BitCount' file format field, that will end up corrupting the Structure Exception Handler SEH. Attackers could exploit this issue to...
FastStone Image Viewer 缓冲区错误漏洞
FastStone Image Viewer is a free image viewing, converting and editing tool. A stack buffer overflow vulnerability exists in the CUR file parsing feature in FastStone Image Viewer 7.5 and earlier versions. The vulnerability can be exploited to execute arbitrary code via specially crafted CUR file...
FastStone Image Viewer 缓冲区错误漏洞
FastStone Image Viewer is a free image viewing, converting and editing tool. A security vulnerability exists in FSViewer.exe in FastStone Image Viewer 7.5 and earlier versions. An attacker can exploit this vulnerability via a malformed CUR file to cause a denial of service or code execution...
Debian DLA-1201-1 : libxcursor security update
It was discovered that libXcursor, a X cursor management library, is prone to several heap overflows when parsing malicious files. An attacker can take advantage of these flaws for arbitrary code execution, if a user is tricked into processing a specially crafted cursor file. For Debian 7 'Wheezy...
icoutils: Buffer overflow in the extract_icons function
A vulnerability was found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution...
icoutils: Buffer overflow in the simple_vec function
A vulnerability was found in icoutils, in the icotool program. An attacker could create a crafted ICO or CUR file that, when read by icotool, could result in memory corruption leading to a crash or potential code execution...
MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)
No description provided by source. / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected systems...
VulnCheck KEV: CVE-2007-1765
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar...
Microsoft Internet Explorer - '.ANI' Downloader (MS05-002)
/ Modified by Vertygo aka Ivanm [email protected] all credits goes to houseofdabus Berend-Jan Wever and to milw0rm/ / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit...
MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)
Exploit for unknown platform in category remote exploits ===================================================================== MS Internet Explorer .ANI files handling Universal Exploit MS05-002 ===================================================================== / Added string.h /str0ke / /...