CVE-2010-1516

SWFTools 0.9.1 is affected by CVE-2010-1516 due to integer/heap-based overflow in two functions: getPNG() in lib/png.c and jpeg_load() in lib/jpeg.c. The vulnerabilities allow remote attackers to craft PNG or JPEG files that could trigger arbitrary code execution or a crash. Gentoo GLSA-201204-05...

SWFTools integer overflows

Integer overflows on PNG and JPEG files...

Secunia Research: SWFTools Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 13/08/2010 - SWFTools Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

Sun Java Runtime Environment JPEGImageReader Heap Overflow

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...

OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

JDK unspecified vulnerability in Java2D component

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

JDK unspecified vulnerability in ImageIO component

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

JDK unspecified vulnerability in Java2D component

Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...

Dynamic photo gallery V1.02 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Dynamic photo gallery V1.02 SQL Injection Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

DEBIAN-CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

Secunia Research: Adobe Reader JPEG Uninitialised Memory Vulnerability

====================================================================== Secunia Research 30/06/2010 - Adobe Reader JPEG Uninitialised Memory Vulnerability - ====================================================================== Table of Contents Affected...

Software Index (Remote File Upload) Exploit

Exploit for php platform in category web applications =========================================== Software Index Remote File Upload Exploit =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Adobe Flash Player DefineBit标签JPEG解析内存破坏漏洞

BUGTRAQ ID: 40784 CVE ID: CVE-2010-2171 Flash Player是一款非常流行的FLASH播放器。 Flash Player负责解析SWF文件中内嵌图形数据的代码中存在安全漏洞，DefineBits标签在处理JPEG数据时存在解析问题。具体来讲，解压例程在对堆内存执行操作之前没有充分地验证图形维度，可能触发内存破坏，导致以运行浏览器用户的权限执行任意代码。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR = 1.5.3.9130 厂商补丁： Adobe -----...

CVE-2010-1753

ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG image...

Memory corruption

ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG image...

CVE-2010-1753

ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG image...

Adobe Flash Player Embedded JPEG Remote Code Execution (APSB10-14; CVE-2010-2164)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. A remote attacker may exploit this vulnerability to take complete control of the affected system. The vulnerability ...

ZDI-10-110: Adobe Flash Player Multiple Tag JPEG Parsing Remote Code Execution Vulnerability

ZDI-10-110: Adobe Flash Player Multiple Tag JPEG Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-110 June 16, 2010 -- CVE ID: CVE-2010-2171 -- Affected Vendors: Adobe -- Affected Products: Adobe Flash Player -- Vulnerability Details: This vulnerabili...

OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...