Gentoo Security Advisory GLSA 200908-10 (dillo)

The remote host is missing updates announced in advisory GLSA 200908-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[oCERT-2009-008] Dillo integer overflow

2009-008 Dillo integer overflow Description: Dillo, an open source graphical web browser, suffers from an integer overflow which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The vulnerability is triggered by HTML pages with embedded PNG images, the...

CVE-2009-2294

Integer overflow in the Pngdatainfocallback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG image with crafted 1 width or 2 height values...

CVE-2009-2294

Dillo up to version 2.1 and earlier is affected by an integer overflow in the Png_datainfo_callback() function when processing crafted PNGs with large width/height. This can lead to a denial of service (crash) and possibly arbitrary code execution. Gentoo GLSA 200908-10 and the related OSS/NVL/Ne...