3128 matches found
openSUSE Security Update : libgdiplus0 (openSUSE-SU-2010:0665-1)
This update fixes three integer overflows found by Secunia Research member Stefan Cornelius that could possibly be exploited to execute arbitrary code : - 'gdiploadtiffimage' by processing specially crafted TIFF images - 'gdiploadjpegimageinternal' by processing specially crafted JPEG images -...
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
Multiple memory corruptions, integer overflows, buffer overflows, code execution, crossite scripting...
libgdiplus / Mono multiple integer overflows
Multiple integer overflows on BPM, JPEG, TIFF parsing...
OpenOffice integer overflows
Integer overflows in Impress...
CVE-2010-3000
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...
CVE-2010-3000
Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted 1 HXFLVMETAAMFTYPEMIXEDARRAY or 2 HXFLVMETAAMFTYPEARRAY data in an FLV file...
CVE-2010-2879
Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted 1 element count or 2 element size value in a file...
Autonomy KeyView multiple security vulnerabilities
Buffer overflows, integer overflows, memory corruptions...
CVE-2010-1526
Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...
CVE-2010-1526
Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...
CVE-2010-1526
CVE-2010-1526 targets libgdiplus (2.6.7) used by Mono. The vulnerability consists of three heap-based/integer overflows in image decoders: gdip_load_tiff_image() (TIFF), gdip_load_jpeg_image_internal() (JPEG), and gdip_read_bmp_image() (BMP). Successful exploitation could lead to arbitrary code e...
CVE-2010-1526
Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...
CVE-2010-1526
Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via 1 a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; 2 a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or 3 a crafted B...
Debian: Security Advisory (DSA-2084-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1516
Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via 1 a crafted PNG file, related to the getPNG function in lib/png.c; or 2 a crafted JPEG file, related to the jpegload function in lib/jpeg.c...
CVE-2010-1516
SWFTools 0.9.1 is affected by CVE-2010-1516 due to integer/heap-based overflow in two functions: getPNG() in lib/png.c and jpeg_load() in lib/jpeg.c. The vulnerabilities allow remote attackers to craft PNG or JPEG files that could trigger arbitrary code execution or a crash. Gentoo GLSA-201204-05...
CVE-2010-1516
Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via 1 a crafted PNG file, related to the getPNG function in lib/png.c; or 2 a crafted JPEG file, related to the jpegload function in lib/jpeg.c...
CVE-2010-1519
Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to 1 the pngLoadRawF function and 2 the pngLoadF function, leading to heap-based buffer overflows...
CVE-2010-1519
Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to 1 the pngLoadRawF function and 2 the pngLoadF function, leading to heap-based buffer overflows...