QuickTime JPEG buffer overflow

Added: 01/24/2006 CVE: CVE-2005-2340 BID: 16212 OSVDB: 22335 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. Resolution Upgrade to QuickTime 7.0.4 or higher...

QuickTime JPEG buffer overflow

Added: 01/24/2006 CVE: CVE-2005-2340 BID: 16212 OSVDB: 22335 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. Resolution Upgrade to QuickTime 7.0.4 or higher...

QuickTime JPEG buffer overflow

Added: 01/24/2006 CVE: CVE-2005-2340 BID: 16212 OSVDB: 22335 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. Resolution Upgrade to QuickTime 7.0.4 or higher...

QuickTime JPEG buffer overflow

Added: 01/24/2006 CVE: CVE-2005-2340 BID: 16212 OSVDB: 22335 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. Resolution Upgrade to QuickTime 7.0.4 or higher...

CVE-2005-4625

Technical details (affected components, root cause, impact, versions, fixes) are not provided in the connected documents. Monitor for updates.

CVE-2005-4625

Drivers for certain display adapters, including 1 an unspecified ATI driver and 2 an unspecified Intel driver, might allow remote attackers to cause a denial of service system crash via a large JPEG image, as demonstrated in Internet Explorer using stoopid.jpg with a width and height of 9999999...

CVE-2005-2340

Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted 1 QuickTime Image File QTIF, 2 PICT, or 3 JPEG format image with a long data field...

CVE-2005-4625

Drivers for certain display adapters, including 1 an unspecified ATI driver and 2 an unspecified Intel driver, might allow remote attackers to cause a denial of service system crash via a large JPEG image, as demonstrated in Internet Explorer using stoopid.jpg with a width and height of 9999999...

CVE-2005-3975

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...

CVE-2005-3975

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...

CVE-2005-3353

The exifreaddata function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service infinite loop via a malformed JPEG image...

CVE-2005-3353

The exifreaddata function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service infinite loop via a malformed JPEG image...

CVE-2005-3353

The exifreaddata function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service infinite loop via a malformed JPEG image...

security flaw

The exifreaddata function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service infinite loop via a malformed JPEG image...

CVE-2005-3310

Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...

Multiple Microsoft Internet Explorer vulnerabilities

Memory corruption on JPEG files parsing, memory corruption on COM object installation, crossite scripting with Web folders...

CVE-2005-1988

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability"...

CVE-2005-1988

The CVE-2005-1988 entry describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.0, 5.5, and 6.0) caused by memory corruption in the JPEG image rendering component. A crafted JPEG image (delivered via a malicious webpage or HTML email) could trigger a buffer over...

CVE-2005-1988

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability"...

MS05-038: Cumulative Security Update for Internet Explorer (896727)

The remote host contains a version of the Internet Explorer that is vulnerable to multiple security flaws JPEG Rendering, Web Folder, COM Object that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web pag...