CVE-2012-5006

Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a djvu file...

CVE-2012-5006

CVE-2012-5006 affects Caminova DjVu Browser Plug-in, specifically the npdjvu.dll component. A heap-based buffer overflow in the plug-in allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a DJVU file. Affected versions include 6.1.4 Build 27351 and earlier than 6.1.4.279...

KLA10138 ACE vulnerability in DjVu Browser Plug-in

A buffer overflow was found in the DjVu Browser Plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed djvu file. Original advisories Changelog Related products DjVu-Browser-Plug-In CVE list...

IrfanView DjVu Plugin DjVu Image File Decompression Overflow

The version of the IrfanView DjVu plugin DjVu.dll was found to be less than 4.34. As such, it is reportedly affected by a heap-based buffer overflow vulnerability that can be triggered by tricking users into opening a .djvu file with a specially crafted DjVu image that is not properly handled...

IrfanView 4.33 - .DJVU Image Processing Heap Overflow

IrfanView 4.33 - .DJVU Image Processing Heap Overflow Application: IrfanView DJVU Image Processing Heap Overflow Version: The vulnerability is confirmed in version 4.33. Other versions may also be affected Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49176 PRL: 2012-23...

IrfanView 4.33 - '.DJVU' Image Processing Heap Overflow

Application: IrfanView DJVU Image Processing Heap Overflow Version: The vulnerability is confirmed in version 4.33. Other versions may also be affected Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49176 PRL: 2012-23 Author: Francis Provencher Protek Research Lab's...

MDVA-2011:010 : djvulibre

Various problems were discovered with the DJVULibre firefox browser-plugin: Browser plugin from dejavulibre is obsolete and was causing browser crashes when viewing DJVU content. This browser plugin is now disabled, mozilla-plugin-dejavu should now be used. Djvulibre crashed when converting DJVU...

[SECURITY] Fedora 14 Update: evince-2.32.0-3.fc14

Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents...

DjVu - 'DjVu_ActiveX_MSOffice.dll' ActiveX Component Buffer Overflow (Metasploit)

$Id: djvuimageurl.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DjVu...

DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflow

This module exploits a stack buffer overflow in DjVu ActiveX Component. When sending an overly long string to the ImageURL property of DjVuActiveXMSOffice.dll 3.0 an attacker may be able to execute arbitrary code. This control is not marked safe for scripting, so choose your attack vector...

CVE-2008-4922

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

Buffer overflow

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

CVE-2008-4922

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

CVE-2008-4922

CVE-2008-4922 describes a buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll). An overly long string to the ImageURL() property (and possibly the Mode, Page, or Zoom properties) can allow remote code execution. The connected sources confirm the affecte...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

No description provided by source. !-- DjVu ActiveX Control ImageURL Property Overflow From DjVu.org : "DjVu pronounced "d�j� vu" is a digital document format with advanced compression technology and high performance value. DjVu allows for the distribution on the Internet and on DVD of very high...

DjVu 'DjVu_ActiveX_MSOffice.dll' ActiveX控件堆缓冲区溢出漏洞

BUGTRAQ ID: 31987 CNCAN ID：CNCAN-2008103102 DjVu是一款LizardTech公司提供的新一代图像格式化软件。 DjVu'DjVuActiveXMSOffice.dll' ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题是控件对ImageURl方法的参数缺少充分边界条件检查，构建恶意的WEB页，诱使用户访问可触发此漏洞。 DjVu 3.0 目前没有解决方案提供： http://djvu.org/ http://www.sebug.net/exploit/4995/...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit =========================================================== Snoop Security Research committee -- input language=JavaScri...

DjVu - ActiveX Control 3.0 ImageURL Property Overflow

Snoop Security Research committee -- // clac.exe var shellcode = unescape "%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" + "%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC009%u10...

DjVu - ActiveX Control 3.0 ImageURL Property Overflow

DjVu - ActiveX Control 3.0 ImageURL Property Overflow Snoop Security Research committee -- // clac.exe var shellcode = unescape "%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...