DTSA-184-1 devil - arbitrary code execution

Bulletin has no description...

DevIL RGBE文件解析栈溢出漏洞

BUGTRAQ ID: 33231 CVECAN ID: CVE-2008-5262 DevIL是Developer's Image Library是缩写，是用于开发具有图形加载功能应用程序的程序员用函数库。 DevIL库的src-IL/src/ilhdr.c文件中的iGetHdrHeader函数存在栈溢出漏洞。如果用户受骗加载了特制的Radiance RGBE文件，就可以触发这个溢出，导致执行任意代码。 DevIL 1.7.4 DevIL ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://openil.sourceforge.net/...

DEBIAN-CVE-2008-5262

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

CVE-2008-5262

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

CVE-2008-5262

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

Stack overflow

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

CVE-2008-5262

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

CVE-2008-5262

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

CVE-2008-5262

DevIL (image library) is affected by CVE-2008-5262 due to two boundary errors in iGetHdrHeader() (src-IL/src/il_hdr.c) that cause stack-based buffer overflows. The vulnerability, in DevIL 1.7.4, can be exploited by parsing a crafted Radiance RGBE file to potentially execute arbitrary code remotel...

CVE-2008-5262

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...

Secunia Research: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 13/01/2009 DevIL "iGetHdrHeader" Buffer Overflow Vulnerabilities ====================================================================== Table of Contents Affected...

DevIL library buffer overflow

Buffer overflow in iGetHdrHeader function on Radiance RGBE files processing...

Joomla All Hotels Component Blind SQL Injection

Joomla Component comallhotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ & http://www.leveltensolutions.net/spa/ DorK : inurl:index.php?option=comallhotels Demo :...

Joomla Component com_lowcosthotels (id) Blind SQL Injection Vulnerability

No description provided by source. Joomla Component comlowcosthotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ DorK : inurl:index.php?option=comlowcosthotels Demo :...

Joomla! Component com_lowcosthotels - Blind SQL Injection

Joomla Component comlowcosthotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ DorK : inurl:index.php?option=comlowcosthotels Demo :...

webstudioecatpi-sql.txt

WebStudio eCatalogue pageid Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.bdigital.biz/index.php?pageid=218 DorK : ""Powered by WebStudio eCatalogue"" Demo : http://webstudioecatalogue.com/index.php?pageid=50+and+substring@@version,1,1=...

YDC (kdlist.php cat) Remote SQL Injection Vulnerability

No description provided by source. || | | YDC cat Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.ydc.ir/ | | DorK : "Powered by YDC" ||...

IranMC Arad Center - SQL Injection

|| | | Arad Center news.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.iranmc.com/shop.php | | DorK : "Designed & Developed by N.E....

Arcadem Pro (articlecat) Remote SQL Injection Vulnerability

No description provided by source. || | | Arcadem Pro articlecat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

vastal-itechtoner.txt

Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo : http://www.vastal.com/united/ Dork :...