qt -- image loader vulnerabilities

Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...

Coppermine Photo Gallery 1.0 - PHP Code Injection

source: https://www.securityfocus.com/bid/7300/info Coppermine Photo Gallery has been reported prone to PHP code injection attacks. Due to a lack of sufficient sanitization performed on user-supplied filenames that are uploaded into the Photo Gallery, an attacker may upload a malicious JPEG. The...

FreeBSD-SA-02:16.netscape

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:16 Security Advisory FreeBSD, Inc. Topic: GIF/JPEG comment vulnerability in Netscape Category: ports Module: netscape Announced: 2002-03-12 Credits: Florian Wesch Affects...

Переполнение буфера в ICQ при обработке jpeg (buffer overflow)

При обработке картинки с очень большими размерами происходит переполнение буфера...

CVE-2000-0655

Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1...

[SECURITY] New version of Netscape Communicator/Navigator released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 1, 2000 - ---------------------------------------------------------------------------- Package: netscape communicator,...

CVE-2000-0655

Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1...

Переполнение кучи в Netscape и Mozilla на JPEG-файлах.

Можно переполнить память отведенную для жранения поля комментария JPEG-файла указав некорректную длину заголовка...

JPEG COM Marker Processing Vulnerability in Netscape Browsers

-----BEGIN PGP SIGNED MESSAGE----- OW-002-netscape-jpeg, revision 1 July 25, 2000 JPEG COM Marker Processing Vulnerability in Netscape Browsers ------------------------------------------------------------- This advisory explains a vulnerability in Netscape browsers present since at least version...

Netscape Communicator 4.x - JPEG-Comment Heap Overwrite

Netscape Communicator 4.x - JPEG-Comment Heap Overwrite source: https://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to...

netscape.jpg-marker.txt

-----BEGIN PGP SIGNED MESSAGE----- OW-002-netscape-jpeg, revision 1 July 25, 2000 JPEG COM Marker Processing Vulnerability in Netscape Browsers ------------------------------------------------------------- This advisory explains a vulnerability in Netscape browsers present since at least version...

Netscape Communicator 4.x - JPEG-Comment Heap Overwrite

source: https://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to process these comments and store them in memory. The...

IrfanView32 3.0.7 - Image File Buffer Overflow

IrfanView32 3.0.7 - Image File Buffer Overflow // source: https://www.securityfocus.com/bid/781/info IrfanView32, a freeware image viewer, has a problem in the handling of Adobe Photoshop generated jpegs. If a .jpg file is opened for viewing that contains the Adobe Photoshop marker in the header...