CVE-2006-1060

CVE-2006-1060 describes a heap-based buffer overflow in the image viewers zgv (before 5.8) and xzgv (before 0.8) that can be triggered by a JPEG image with more than 3 output components (e.g., CMYK/YCCK). The flaw allows user-assisted or remote exploitation to execute arbitrary code due to under-...

CVE-2006-1060

Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required...

Null pointer dereference

Imager libimager-perl before 0.50 allows user-assisted attackers to cause a denial of service segmentation fault by writing a 2- or 4-channel JPEG image or a 2-channel TGA image to a scalar, which triggers a NULL pointer dereference...

CVE-2006-0053

Imager libimager-perl before 0.50 allows user-assisted attackers to cause a denial of service segmentation fault by writing a 2- or 4-channel JPEG image or a 2-channel TGA image to a scalar, which triggers a NULL pointer dereference...

CVE-2006-0053

Imager libimager-perl before 0.50 allows user-assisted attackers to cause a denial of service segmentation fault by writing a 2- or 4-channel JPEG image or a 2-channel TGA image to a scalar, which triggers a NULL pointer dereference...

CVE-2006-0053

Imager libimager-perl before 0.50 allows user-assisted attackers to cause a denial of service segmentation fault by writing a 2- or 4-channel JPEG image or a 2-channel TGA image to a scalar, which triggers a NULL pointer dereference...

xzgv buffer overflow

Heap buffer overflow during JPEG parsing...

[SA19572] xzgv JPEG Image Parsing Heap Overflow Vulnerability

TITLE: xzgv JPEG Image Parsing Heap Overflow Vulnerability SECUNIA ADVISORY ID: SA19572 VERIFY ADVISORY: http://secunia.com/advisories/19572/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: xzgv 0.x http://secunia.com/product/4194/ DESCRIPTION: A vulnerability has...

[SECURITY] [DSA 1028-1] New libimager-perl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1028-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1028-1] New libimager-perl packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1028-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2006 http://www.debian.org/security/faq -...

Tony Cook Imager 0.4x - .JPEG .TGA Images Denial of Service

Tony Cook Imager 0.4x - .JPEG .TGA Images Denial of Service source: https://www.securityfocus.com/bid/17415/info The Perl Imager module is susceptible to a denial-of-service vulnerability. This issue is due to a failure of the software to properly handle unexpected image data. Malformed image fil...

DSA-1028-1 libimager-perl - denial of service

Bulletin has no description...

CVE-2006-1552

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

Integer overflow

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service crash via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom"...

CVE-2006-1552

CVE-2006-1552 describes an integer overflow in ImageIO used by Apple Mac OS X 10.4 up to 10.4.5. A crafted JPEG image with malformed metadata can remotely cause a denial of service (crash) via Safari (aka Deja-Doom). The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low...

Microsoft Windows - Color Management Module Overflow (MS05-036) (2)

/ \ MS05-036 ICC Stack Overflow Exploit / by Darkeagle \ / GreetZ: all unl0ckerz, ed, f0st, uf0, sowhat, str0ke, black, redsand \ / \ special tnx to snooq for his PoC. / \ / xploit was tested on WinXP SP1 RUS with explorer.exe \ / 02.08.05 \ / http://eagle.blacksecurity.org \ / include include...

Moderate: Red Hat Security Advisory: gd security update

Updated gd packages that fix several buffer overflow flaws are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gd package contains a graphics library used for the dynamic creation of images such as PNG and JPEG. Several buffe...

DSA-958-1 drupal - several

Bulletin has no description...

QuickTime JPEG buffer overflow

Added: 01/24/2006 CVE: CVE-2005-2340 BID: 16212 OSVDB: 22335 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. Resolution Upgrade to QuickTime 7.0.4 or higher...