706 matches found
Fedora 7 : openoffice.org-2.2.1-18.2.fc7 (2007-2372)
This security updates addresses CVE-2007-2834 a flaw in how openoffice.org handles corrupt TIFF graphic format file headers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Update Protection against OpenOffice TIFF File Parsing Integer Overflow Vulnerability
An integer overflow vulnerability has been identified in the OpenOffice software suite. OpenOffice is an open source office suite that is capable of processing several types of graphic document formats, including the Tagged Image File Format TIFF. A remote attacker could exploit this issue via a...
java-jre: GIF buffer overflow
Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...
Fedora Core 6 : openoffice.org-2.0.4-5.5.24 (2007-700)
This security updates addresses CVE-2007-2834 a flaw in how openoffice.org handles corrupt TIFF graphic format file headers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Moderate: Red Hat Security Advisory: ImageMagick security update
Updated ImageMagick packages that correct several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple...
Nvidia for Linux / Solaris graphic drivers buffer overflow
Integer overflow in nv000053X function leads to buffer overflow...
Microsoft Internet Explorer WMF图形解析内存破坏漏洞（MS06-004）
Microsoft Internet Explorer是一款非常流行的WEB浏览器。 Microsoft Internet Explorer在处理畸形的WMF文件时存在漏洞，攻击者可能利用此漏洞导致用户机器拒绝服务或执行任意指令。 Internet Explorer 5.01 SP4中所使用的Microsoft WMF解析应用程序存在内存破坏漏洞。攻击者可以创建带有畸形WMF头部大小的特制WMF文件，如果用户被诱使浏览了该文件的话就会触发整数溢出，导致拒绝服务或执行任意指令。 Microsoft Internet Explorer 5.0.1 SP4 - Microsoft Window...
Microsoft Windows帮助图形处理堆溢出漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 winhlp32.exe的.hlp文件渲染引擎中存在堆溢出漏洞，攻击者可以通过在.hlp文件中嵌入HTML页面来触发这个漏洞，覆盖内存块并执行任意指令。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows NT Server 4.0 Microsoft Windows 2000SP4 Microsoft...
CentOS 3 / 4 : ImageMagick (CESA-2006:0633)
Updated ImageMagick packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple...
CentOS 4 : netpbm (CESA-2005:793)
Updated netpbm packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ MyBulletinBoard MyBB 1.1.3 Remote Code Execution Exploit ============================================================ !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 email protected...
CVE-2006-0030
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption...
[SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 957-2 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 957-2 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2006 http://www.debian.org/security/faq -...
ImageMagic graphic utilities shell characters problem
Shell characters problem with image filenames...
MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)
The remote host contains a version of Microsoft Windows missing a critical security update to fix several vulnerabilities in the Graphic Rendering Engine, and in the way Windows handles Metafiles. An attacker could exploit these flaws to execute arbitrary code on the remote host by sending a...
FUD Forum < 2.7.1 PHP code injection vurnelability
Avatar upload in FUD Forum 2.7.1 may be tricked to upload a PHP file. To do so merge a graphic avatar file with a PHP file. cat foo.png foo.php uploadme.php under linux/unix. On win try notepat :...
security flaw
Double free vulnerability in gtk 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service crash via a crafted BMP image...
DEBIAN-CVE-2004-1125
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted PD...