Cosminexus, Processing Kit for XML and Hitachi Developer's Kit for Java Buffer Overflow Vulnerabilities

Overview Cosminexus, Processing Kit for XML and Hitachi Developer's Kit for Java may suffer from buffer overflow when a Java application handles GIF images with the image-processing APIs. Impact An attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section fo...

libgd Denial of service by corrupted GIF images

Array index error in gdgifin.c in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to cause a denial of service crash and heap corruption via large color index values in crafted image data, which results in a segmentation fault...

tk: GIF handling buffer overflow

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

DEBIAN-CVE-2007-6697

Buffer overflow in the LWZReadByte function in IMGgif.c in SDLimage before 1.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted GIF file, a similar issue to CVE-2006-4484. NOTE: some of these details are obtained from third...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Debian Security Advisory DSA 471-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 471-1. OpenVAS Vulnerability Test $Id: deb4711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 471-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 150-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 150-1. OpenVAS Vulnerability Test $Id: deb1501.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 150-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 150-1 (interchange)

The remote host is missing an update to interchange announced via advisory DSA 150-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-471)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

java-jre: GIF buffer overflow

Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...

DEBIAN-CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

Code injection

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...

CVE-2007-2635

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...

CVE-2007-2635

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...

CVE-2007-2635

CVE-2007-2635 affects Interchange prior to 5.4.2 (and related lines) with an unspecified vulnerability that allows remote attackers to cause a denial of service (potential server hang) via crafted HTTP requests. Multiple sources confirm the issue and the fix is to upgrade to Interchange 5.4.2 or ...

CVE-2007-2635

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...

CVE-2004-2668

SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2004-2668

CVE-2004-2668 : Interchange before 4.8.9 has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown vectors. Affected software: Interchange (web commerce platform). Root cause: improper handling of user input in SQL queries. Impact: potential una...