Microsoft Internet Explorer JPEG rendering library vulnerable to buffer overflow

Overview A vulnerability in the Microsoft Internet Explorer JPEG image rendering routines may allow an attacker to remotely execute arbitrary code. Description Microsoft Internet Explorer is a web browser that is available for a variety of platforms and devices. A flaw in the image rendering...

CVE-2005-2309

CVE-2005-2309 affects Opera 8.01: a crafted JPEG image can cause a denial-of-service (CPU consumption). Demonstrated with random.jpg. Documents confirm Opera as affected and the DoS impact; no additional details on root cause or patch are provided in the supplied sources.

CVE-2005-2309

Opera 8.01 allows remote attackers to cause a denial of service CPU consumption via a crafted JPEG image, as demonstrated using random.jpg...

CVE-2005-2308

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using 1 movfencepost.jpg, 2 cmpfencepost.jpg, 3 oomdos.jpg, or 4 random.jpg...

CVE-2005-2308

The CVE-2005-2308 entry affects Microsoft Internet Explorer's JPEG decoding component. The provided documents describe a denial-of-service condition (CPU consumption or crash) and the possibility of arbitrary code execution triggered by specially crafted JPEG images (examples: mov_fencepost.jpg, ...

CVE-2005-2308

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using 1 movfencepost.jpg, 2 cmpfencepost.jpg, 3 oomdos.jpg, or 4 random.jpg...

CVE-2005-2309

Opera 8.01 allows remote attackers to cause a denial of service CPU consumption via a crafted JPEG image, as demonstrated using random.jpg...

Microsoft Windows Color Management module buffer overflow

Buffer overflow during ICC tags processing in different graphics formats, including JPEG...

Multiple Internet Explorer JPEG parsing problems

Multiple problems including memory corruption on JPEG parsing...

Compromising pictures of Microsoft Internet Explorer!

Synopsis: --------- Well, not really. Instead, at the risk of boring you to death, I'd like to report on a casual 30-minute experiment I've conducted of recent. This experiment resulted in identifying a potential remote code execution path in Microsoft Internet Explorer, plus some other bugs, and...

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering CMP Fencepost Denial of Service

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering CMP Fencepost Denial of Service source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue...

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering Buffer Overflow

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering Buffer Overflow source: https://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the...

Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Buffer Overflow

source: https://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the application to properly bounds check input data prior to copying it to a fixe...

Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service

source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282. This issue was identified by...

Microsoft Internet Explorer / MSN - ICC Profiles Crash (PoC)

/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...

Slackware 10.0 / 9.0 / 9.1 / current : Qt (SSA:2004-236-01)

New Qt packages are available for Slackware 9.0, 9.1, 10.0, and -current to fix security issues. Bugs in the routines that handle PNG, BMP, GIF, and JPEG images may allow an attacker to cause unauthorized code to execute when a specially crafted image file is processed. These flaws may also cause...

CVE-2004-2179

asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service hang via a JPEG image with maximum height and width values...

CVE-2004-2179

CVE-2004-2179 affects asycpict.dll used in Microsoft FrontPage 97/98; allows remote DoS by sending a JPEG with maximum height/width, causing a hang. Red Hat and CVE lists mirror the description; no remediation details are provided in the connected documents. Exploit details and fix/version inform...

Debian DSA-729-1 : php4 - missing input sanitising

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in woody as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation. %NASLMINLEVE...

gd security update

CentOS Errata and Security Advisory CESA-2004:638 Updated gd packages that fix security issues with overflow in various memory allocation calls are now available. Updated 24 May 2005 Multilib packages have been added to this advisory The gd packages contain a graphics library used for the dynamic...