493 matches found
Design/Logic Flaw
Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain potentially sensitive information by reading a PNG image that was created through conversion from an...
IrfanView 4.28 - ICO Without Transparent Colour DoS & RDoS
Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...
IrfanView 4.28 - ICO With Transparent Colour DoS & RDoS
Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5:...
IrfanView 4.28 - .ICO With Transparent Colour Denial of Service Remote Denial of Service
IrfanView 4.28 - .ICO With Transparent Colour Denial of Service Remote Denial of Service done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com...
IrfanView 4.28 - '.ICO' Without Transparent Colour Denial of Service / Remote Denial of Service
done by BraniX www.hackers.org.pl found: 2011.04.07 published: 2011.04.10 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: IrfanView 4.28 App Url: http://www.irfanview.com iview32.exe MD5: c6d9383c4119a59aad70dbc4a974b8b4 DoS is caused by not handled Access...
Easy Icon Maker Crash
! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX 00000000 EDX 00000000 EBX 00000000 ESP...
Easy Icon Maker .ico File Reading Crash
Exploit for windows platform in category dos / poc ======================================= Easy Icon Maker .ico File Reading Crash ======================================= ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : email protect...
Easy Icon Maker - .ico File Reading Crash
Easy Icon Maker - .ico File Reading Crash ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX...
SuSE9 Security Update : gdk-pixbuf (YOU Patch Number 9368)
Three security vulnerabilities have been found in the loader for XPM images of the GTK library. These issues are : - Potential heap overflow in pixbufcreatefromxpm. CVE-2004-0782 - Potential stack overflow in xpmextractcolor. CVE-2004-0783 - Potential integer overflow in the ICO icon format loade...
Design/Logic Flaw
gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...
CVE-2008-4327
gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a certain crash.ico file on a web site, and allows user-assisted attackers to cause a denial of...
Microsoft Windows - GDI+ '.ICO' Remote Division By Zero
MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...
Microsoft Windows - GDI+ .ICO Remote Division By Zero
Microsoft Windows - GDI+ .ICO Remote Division By Zero MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with...
MS Windows GDI+ (.ico File) Remote Division By Zero Exploit
Exploit for unknown platform in category dos / poc =========================================================== MS Windows GDI+ .ico File Remote Division By Zero Exploit =========================================================== MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DL...
mswingdi-dos.txt
MS Windows GDI+ .ico Remote Division By Zero Application: GDIPLUS.DLL Web Site: http://www.microsoft.com/ Platform: Windows Bug: Division By Zero Tested agains: XP SP3 fully patched Note: This have nothing to do with http://milw0rm.com/exploits/4044...
[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7
This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...
CVE-2008-0758
Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...
CVE-2008-0758
Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...
Re: GDI+ and Internet Explorer question
IE has its own image decoders for many image types jpeg, ico, etc. You can trigger this bug remotely by renaming your .ico to .emf or .wmf, which forces it be opened by the Picture and Fax Viewer using GDI+. -HD On Saturday 09 June 2007 06:40, [email protected] wrote: fails to crash my Internet...