CVE-2004-0200: Undefined Security Weakness

Buffer overflow in the JPEG JPG parsing engine in the Microsoft Graphic Device Interface Plus GDI+ component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy...

security flaw

The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...

CVE-2003-0141

The PNG deflate algorithm in RealOne Player 6.0.11.x and earlier, RealPlayer 8/RealPlayer Plus 8 6.0.9.584, and other versions allows remote attackers to corrupt the heap and overwrite arbitrary memory via a PNG graphic file format containing compressed data using fixed trees that contain the...

CVE-2003-0141

CVE-2003-0141 involves RealOne Player 6.0.11.x and earlier and RealPlayer 8/RealPlayer Plus 8 6.0.9.584 (and related RealPlayer variants) where the PNG deflate algorithm can trigger heap corruption by processing a PNG containing compressed data using fixed trees with length values 286–287, treate...

Переполнение буфера в Outlook Express

Переполнение буфера, при длинном MIME-поле filename для прикрепленных файлов графических форматов...

Overflow in Outlook Express 4.* - too long filenames with graphic format extension

==== APPLICATION AFFECTED Outlook Express 4. 5. is not affected ==== DESCRIPTION All attached graphic files are automatically shown in the Outlook Express while viewing the e-mail. The problem is that long filenames with .jpg .bmp extension makes overflow if filename lenght is longer then 256...

IE5.01 Frozes system on huge images

IE5.01 Frozes system on huge images 20.01.2000 Reproducability: Open http://www.security.nnov.ru/files/ie5hang.asp to test vulnerability save you data before : I can reproduce this bug on all PCs with Windows NT 4.0 SP5-6a + IE5, but reaction is different. Reaction can probably depend on type of...