CVE-2005-0903

CVE-2005-0903 is a concrete vulnerability in Apple QuickTime PictureViewer (versions around 6.5.1, with advisories noting 6.5.2 as a fix). The issue is a buffer overflow in the PictureViewer component when parsing JPEG images containing crafted Huffman Table (DHT) data, enabling remote denial of ...

CVE-2005-0903

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service application crash via a JPEG file with crafted Huffman Table marker DHT data...

Apple QuickTime JPEG buffer overflow

Buffer overflow on JPEG format parsing...

QuickTime malformed JPEG buffer overflow

When fuzzing some application with malformed input files, if we want to discover some vulnerability we have to create input file which is very close to valid file but yet malformed in some way. In that way chances for discovery are greater. Now let's play with JPEG format. We concentrate on Huffm...

QuickTime < 6.5.2 PictureViewer Malformed JPEG Overflow (Windows)

The remote host is using QuickTime, a popular media player/Plug-in that handles many Media files. The remote version of this software contains a buffer overflow vulnerability in its PictureViewer that could allow an attacker to execute arbitrary code on the remote host. To exploit this...

Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028; CVE-2004-0200)

...

CVE-2005-0664

CVE-2005-0664 concerns a buffer overflow in libexif 0.6.9 due to improper validation of EXIF tag structures, enabling a crafted JPEG image to cause an application crash and potentially allow remote code execution. Publicly documented impact is a crash and possible arbitrary code execution, with e...

CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2005-0406

Technical details about CVE-2005-0406 are not publicly provided in the connected documents (no explicit affected products, versions, vectors, or fixes). Monitor for updates.

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2004-2179

asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service hang via a JPEG image with maximum height and width values...

CVE-2004-1279

Buffer overflow in the getfileliststdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of JPEG files and filenames...

Windows GDI+ libraries JPEG buffer overflow

Buffer overflow in JPEG parsing routines...

CVE-2004-0200

Buffer overflow in the JPEG JPG parsing engine in the Microsoft Graphic Device Interface Plus GDI+ component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy...

MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload

Exploit for unknown platform in category remote exploits =============================================================== MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload =============================================================== / Exploit Name: ============= JpegOfDeath.M.c...

Microsoft Windows - JPEG GDI+ BindReverseAdminFile Download

Microsoft Windows - JPEG GDI+ BindReverseAdminFile Download / Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha,...