7155 matches found
XnView JPEG-LS Image Processing Buffer Overflow Vulnerability
XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...
What does a pointer look like, anyway?
Posted by Chris Evans, Renderer of Modern Art In Adobe’s August 2014 Flash Player security update, we see: These updates resolve memory leakage vulnerabilities that could be used to bypass memory address randomization CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545. I...
[SECURITY] Fedora 20 Update: gd-2.1.0-6.fc20
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
OpenJDK: JPEG decoder input stream handling (2D, 8029854)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
PT-2014-2044
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.34 PHP versions 5.5.x prior to 5.5.18 PHP versions 5.6.x prior to 5.6.2 Description The issue is caused by a buffer overflow in the PHP language interpreter extension. It may allow a remote attacker to execute arbitra...
JPEG Files Containing Suspicious Comments
Certain JPEG files may contain malicious code, hidden within the comments marker...
Heap overflow
Heap-based buffer overflow in the xjpegls.dll aka JLS, JPEG-LS, or JPEG lossless format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file...
CVE-2012-4988
XnView 1.99 and 1.99.1 are affected by a heap-based buffer overflow in the xjpegls.dll (JPEG-LS) plugin when processing crafted JLS images, enabling remote code execution. The vulnerability arises during JLS decompression in the XnView Formats PlugIn; PoCs and exploits exist (e.g., for XnView 1.9...
CVE-2012-4988
Heap-based buffer overflow in the xjpegls.dll aka JLS, JPEG-LS, or JPEG lossless format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file...
deV!Lz Clanportal [DZCP] <= 1.3.6 - Arbitrary File Upload Vulnerability
No description provided by source. S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code and execute it,...
IrfanView TIF Image Decompression Buffer Overflow Vulnerability
No description provided by source. Application: IrfanView TIF Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...
Microsoft Internet Explorer 5.0.1 JPEG Image Rendering Unspecified Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the application to properly bounds check input...
Microsoft Internet Explorer 5.0.1 JPEG Image Rendering CMP Fencepost Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282...
Mozilla Firefox 3.0 - Malformed JPEG File Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29984/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. This issue affects Firefox...
Irfan Skiljan IrfanView32 3.0.7 Image File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/781/info IrfanView32, a freeware image viewer, has a problem in the handling of Adobe Photoshop generated jpegs. If a .jpg file is opened for viewing that contains the Adobe Photoshop marker in the header 8BPS followed by...
Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities
No description provided by source. Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...
GeoVision Digital Surveillance System 6.0 4/6.1 Unauthorized JPEG Image Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue results from an access validation error. GeoVision...
ClamAV < 0.94.2 (JPEG Parsing) Recursive Stack Overflow PoC
No description provided by source. / There is a recursive stack overflow in clamav 0.93.3 and 0.94 and probably older versions in the jpeg parsing code. it scan's the jpeg file, and if there is a thumbnail, it'll scan that too. the thumbnail itself is just another jpeg file and the same jpeg...
Cool PDF Image Stream Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Tony Cook Imager 0.4x JPEG and TGA Images Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17415/info The Perl Imager module is susceptible to a denial-of-service vulnerability. This issue is due to a failure of the software to properly handle unexpected image data. Malformed image files may cause a crash in...