1977 matches found
[Full-disclosure] [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:112 http://www.mandriva.com/security/ Package : gd Date : June 27, 2006 Affected: 10.2, 2006.0 Problem Description: The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics dra...
Mandrake Linux Security Advisory : tetex (MDKSA-2006:113)
Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly other versions. These overflows allow remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow ...
CVE-2006-2906
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw GD library aka libgd 2.0.33 allows remote attackers to cause a denial of service CPU consumption via malformed GIF data that causes an infinite loop...
CVE-2006-2906
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw GD library aka libgd 2.0.33 allows remote attackers to cause a denial of service CPU consumption via malformed GIF data that causes an infinite loop...
CVE-2006-2906
CVE-2006-2906 affects the GD graphics library (libgd2) via the LZW decoding path in gdImageCreateFromGifPtr, causing an infinite loop and CPU denial of service when processing malformed GIFs. Affected packages include libgd2 used by PHP-gd and standalone libgd2 implementations; multiple advisorie...
CVE-2006-2906
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw GD library aka libgd 2.0.33 allows remote attackers to cause a denial of service CPU consumption via malformed GIF data that causes an infinite loop...
GD Graphics Library 2.0.33 - Remote Denial of Service
GD Graphics Library 2.0.33 - Remote Denial of Service // source: https://www.securityfocus.com/bid/18294/info The GD Graphics Library is prone to a denial-of-service vulnerability. Attackers can trigger an infinite-loop condition when the library tries to handle malformed image files. This issue...
GD Graphics Library 2.0.33 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/18294/info The GD Graphics Library is prone to a denial-of-service vulnerability. Attackers can trigger an infinite-loop condition when the library tries to handle malformed image files. This issue allows attackers to consume excessive CPU resources on...
Coppermine Photo Gallery <=1.4.3 remote code execution
Coppermine Photo Gallery = 1.4.3 arbitrary local/remote inclusion: --------- - 18/02/2006 5.09.55 ----------------------------------------------------------- -------------------------------------------------------------------------------- software: site: http://coppermine-gallery.net/index.php...
Mandrake Linux Security Advisory : php (MDKSA-2006:035)
A flaw in the PHP gd extension in versions prior to 4.4.1 could allow a remote attacker to bypass safemode and openbasedir restrictions via unknown attack vectors. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
RHEL 4 : gd (RHSA-2006:0194)
Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG. Several buffe...
gd security update
CentOS Errata and Security Advisory CESA-2006:0194 Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic...
Moderate: Red Hat Security Advisory: gd security update
Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG. Several buffe...
gd: additional overflows
Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990...
Ubuntu 4.10 / 5.04 / 5.10 : php4, php5 vulnerabilities (USN-232-1)
Eric Romang discovered a local Denial of Service vulnerability in the handling of the 'session.savepath' parameter in PHP's Apache 2.0 module. By setting this parameter to an invalid value in an .htaccess file, a local user could crash the Apache server. CVE-2005-3319 A Denial of Service flaw was...
USN-232-1: PHP vulnerabilities
Eric Romang discovered a local Denial of Service vulnerability in the handling of the 'session.savepath' parameter in PHP's Apache 2.0 module. By setting this parameter to an invalid value in an .htaccess file, a local user could crash the Apache server. CVE-2005-3319 A Denial of Service flaw was...
Plogger SQL&XSS vuln.
Plogger SQL&XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plogger-sqlxss-vuln.html vendor:http://www.plogger.org/ affected version:Beta 2 and prior Product Description: Plogger is the definitive open-source web photo gallery. Simple to...
CVE-2005-3391
Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in 1 ext/curl and 2 ext/gd...
