493 matches found
Microsoft Windows GDI+ ICO文件远程拒绝服务漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的GDI+（Gdiplus.dll）在处理畸形的ICO文件时存在拒绝服务漏洞，可能导致资源管理器在处理时发生崩溃。 如果用户通过资源管理器或Windows图片和传真查看器之类的组件所打开的ICO文件中InfoHeader部分设置的Height值为0，就可能导致将0用作除数，资源管理器进程会崩溃。有漏洞函数反汇编如下： .text:4ED9E209 ; private: int thiscall GpIcoCodec::IsValidDIBunsigned int .text:4ED9E2...
CVE-2007-3126
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...
Code injection
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...
CVE-2007-3126
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...
CVE-2007-3126
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...
MS Windows GDI+ ICO File Remote Denial of Service Exploit
No description provided by source. Author : kad Mail : kadathighsecudotcom Site : http://www.highsecu.com highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .ICO files http://www.milw0rm.com/sploits/06072007-CVE-2007-2237.zip sebug.net...
CVE-2007-3126
Gimp before 2.8.22 is vulnerable to a denial-of-service via ICO files with an ICO InfoHeader Height of zero. The issue is a context-dependent crash and is documented in multiple advisories (e.g., Mageia openSUSE/SUSE updates) referencing CVE-2007-3126. A patch was released with GIMP 2.8.22 to fix...
CVE-2007-3126
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237...
MS Windows GDI+ ICO File Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================= MS Windows GDI+ ICO File Remote Denial of Service Exploit ========================================================= highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .IC...
Microsoft Windows - GDI+ '.ICO' File Remote Denial of Service
Author : kad Mail : kadathighsecudotcom Site : http://www.highsecu.com highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .ICO files https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4044.zip 06072007-CVE-2007-2237.zip milw0rm.com 2007-06-07...
Microsoft Windows - GDI+ .ICO File Remote Denial of Service
Microsoft Windows - GDI+ .ICO File Remote Denial of Service Author : kad Mail : kadathighsecudotcom Site : http://www.highsecu.com highsecu.ico - Microsoft GDI+ Integer division by zero flaw handling .ICO files...
Code injection
Microsoft Windows Graphics Device Interface GDI+, GdiPlus.dll allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error...
CVE-2007-2237
Microsoft Windows Graphics Device Interface GDI+, GdiPlus.dll allows context-dependent attackers to cause a denial of service crash via an ICO file with an InfoHeader containing a Height of zero, which triggers a divide-by-zero error...
Microsoft Windows GDI+ ICO InfoHeader Height division by zero vulnerability
Overview Microsoft Windows GDI+ fails to properly handle ICO files, which could allow a remote, unauthenticated attacker to cause a denial-of-service condition. Description Microsoft Windows Graphics Device Interface GDI+ is an application programming interface API that provides programmers the...
Microsoft Windows XP - GDI+ '.ICO' File Remote Denial of Service
source: https://www.securityfocus.com/bid/24346/info Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to properly handle maliciously crafted ICO files. An attacker may exploit this issue by enticing victims into opening a malicious file. Successful exploits...
Microsoft Windows XP - GDI+ .ICO File Remote Denial of Service
Microsoft Windows XP - GDI+ .ICO File Remote Denial of Service source: https://www.securityfocus.com/bid/24346/info Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to properly handle maliciously crafted ICO files. An attacker may exploit this issue by...
Stack overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...
Gdiplus.dll division by 0
!/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to Poc.png and have it as display picture...
