76 matches found
Mandrake Linux Security Advisory : netscape (MDKSA-2000:027-1)
Previous versions of Netscape, from version 3.0 to 4.73 contain a serious overflow flaw due to improper input verification in Netscape's JPEG processing code. The way Netscape processed JPEG comments trusted the length parameter for comment fields. By manipulating this value, it was possible to...
ImageMagick: excessive CPU use DoS by processing JPEG images with crafted restart markers
The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service memory consumption via a JPEG image with a crafted sequence of restart markers...
Java Web Start Buffer JPEG processing integer overflow (6823373)
Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen, which triggers a...
Mandriva Update for clamav MDVSA-2008:239 (clamav)
Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2008:239 clamav Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
[Backports-security-announce] Security Update for clamav
Sebastian Harl uploaded new packages for clamav which fixed the following security problems: CVE-2008-5050, Debian BTS 505134 Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow...
DSA-1680-1 clamav - potential code execution
Bulletin has no description...
MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)
No description provided by source. !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering the mouse over the image...
ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability
ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-033 May 27, 2008 -- Affected Vendors: Motorola -- Affected Products: Motorola RAZR -- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary cod...
PT-2008-3667 · Microsoft · Windows Ce
Name of the Vulnerable Software and Affected Versions: Microsoft Windows CE version 5.0 Description: The issue concerns unspecified vulnerabilities in the JPEG GDI+ and GIF image processing components. These vulnerabilities allow remote attackers to execute arbitrary code via crafted JPEG and GIF...
Adobe Flash Player multiple security vulnerabilities
Heap buffer overflow on JPEG processing, universal crossite scripting, information leak...
CVE-2007-4314
Pixlie 1.7 has a vulnerability in pixlie.php where remote attackers can trigger reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter, potentially enabling traffic amplification or other denial of service. Affected software is Pixlie 1.7 (pixlie.php...
Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities
No description provided by source. Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...
Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities
Exploit for multiple platform in category dos / poc ================================================================== Opera = 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities ================================================================== Opera JPEG processing - Heap corruption...
FreeBSD : opera -- JPEG processing integer overflow vulnerability (799) (deprecated)
The remote host is missing an update to the system The following package is affected: linux-opera This plugin has been deprecated since the advisory has been canceled. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been cancelled. Disabled on 2011/10/02. ...
Microsoft Security Bulletin MS04-028 Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
Microsoft Security Bulletin MS04-028 Buffer Overrun in JPEG Processing GDI+ Could Allow Code Execution 833987 Issued: September 14, 2004 Version: 1.0 Summary Who should read this document: Customers who use any of the affected operating systems, affected software programs, or affected components...
MS04-028: Buffer Overrun in JPEG Processing (833987)
The remote host is running a version of Windows that is vulnerable to a buffer overrun attack when viewing a JPEG file which could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed JPEG file to a user on the remote hos...