CVE-2006-1983

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 PredictorVSetField function for TIFF or 2 CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit...

CVE-2006-1982

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images...

CVE-2006-1982

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images...

CVE-2006-1984

CVE-2006-1984 describes an unspecified vulnerability in the Mac OS X TIFF handling path. The issue is located in the internal function _cg_TIFFSetField used by applications leveraging ImageIO or AppKit, affecting Mac OS X 10.4.6 and earlier. A crafted TIFF image can trigger a null dereference, al...

CVE-2006-1983

CVE-2006-1983 describes multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier, exploitable via ImageIO/AppKit: a TIFF PredictorVSetField issue and a GIF CFAllocatorAllocate issue. A related issue, CVE-2006-2238, is a separate heap-based overflow in Apple QuickTime BMP processing (Re...

CVE-2006-1982

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images. The connected sources (including PRION page) confirm the root cause and impact description; no details on ...

CVE-2006-1983

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the 1 PredictorVSetField function for TIFF or 2 CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit...

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

CVE-2006-1552 describes an integer overflow in ImageIO used by Apple Mac OS X 10.4 up to 10.4.5. A crafted JPEG image with malformed metadata can remotely cause a denial of service (crash) via Safari (aka Deja-Doom). The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low...

CVE-2005-2747

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

CVE-2005-2747

CVE-2005-2747 is a buffer overflow in the Apple Mac OS X ImageIO framework (OS X 10.4.2) used by WebCore and Safari. The vulnerability occurs in how GIF images are processed, allowing a remote attacker to execute arbitrary code. Affected components include ImageIO within OS X 10.4.x; the issue co...

CVE-2005-2747

Buffer overflow in ImageIO for Apple Mac OS X 10.4.2, as used by applications such as WebCore and Safari, allows remote attackers to execute arbitrary code via a crafted GIF file...

Apple Mac OS X ImageIO fails to properly handle corrupt GIF files

Overview The Apple Mac OS X ImageIO framework contains a buffer overflow that may allow a remote attacker to execute arbitrary code. Description Apple ImageIO is an image processing framework that was introduced in OS X 10.4 Tiger. ImageIO is used by several applications, including WebCore and...

Multiple MacOS X vulnerabilites

ImageIO GIF files parsing buffer overflow, Mail.app information leakage, QuickDraw Manager PICT files parsing buffer overflow, Java virtual machine quick time extensions safe mode protection bypass, Safari crossite scripting...

Mac OS X Multiple Vulnerabilities (Security Update 2005-008)

The remote host is running Apple Mac OS X, but lacks Security Update 2005-008. This security update contains fixes for the following applications : - ImageIO - LibSystem - Mail - QuickDraw - Ruby - SecurityAgent - securityd C Tenable Network Security, Inc. include"compat.inc"; if description...