6095 matches found
JDK unspecified vulnerability in ImageIO component
Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...
OpenJDK JPEGImageReader stepX Integer Overflow Vulnerability (6909597)
Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CP...
QuickTime < 7.6.6 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.6.6. Such versions contain several vulnerabilities : - A heap-based buffer overflow in QuickTime's handling of PICT images may lead to an application crash or arbitrary code execution. CVE-2009-2837 - A memory corruptio...
QuickTime < 7.6.6 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.6.6. Such versions contain several vulnerabilities : - A memory corruption issue in QuickTime's handling of QDM2 encoded audio content may lead to an application crash or arbitrary code execution. CVE-2010-0059 - A...
CVE-2010-0517
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...
Heap overflow
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...
CVE-2010-0517
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields,...
Google Picasa < 3.6 Build 105.41
The version of Google Picasa running on the remote host reportedly has an integer overflow vulnerability when processing specially crafted JPEG files. This can lead to a heap overflow. A remote attacker could exploit this by tricking a user into opening a maliciously crafted JPEG file, resulting ...
Google Picasa Heap Overflow Hole Closed
Secunia reports a hole in Google’s Picasa image management and editing software that allows attackers to compromise Windows using specially crafted JPEG images to provoke an integer overflow in the PicasaPhotoViewer.exe file, which can then be exploited to cause a heap overflow. Google closed the...
Google Picasa JPEG Image Processing Integer Overflow Vulnerability
A vulnerability has been identified in Google Picasa, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by an integer overflow error in "PicasaPhotoViewer.exe" when processing malformed JPEG images, which could be exploited by attackers to execute...
Debian DSA-1890-1 : wxwindows2.4 wxwidgets2.6 wxwidgets2.8 - integer overflow
Tielei Wang has discovered an integer overflow in wxWidgets, the wxWidgets Cross-platform C++ GUI toolkit, which allows the execution of arbitrary code via a crafted JPEG file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
Debian DSA-1912-1 : camlimages - integer overflow
It was discovered that CamlImages, an open source image processing library, suffers from several integer overflows, which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. This advisory addresses issues with the reading of TIFF files. It also expands the...
Debian DSA-1857-1 : camlimages - integer overflow
Tielei Wang discovered that CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. This advisory addresses issues with the reading of JPEG and GIF Images, while D...
Microsoft画图工具JPEG图形处理整数溢出溢出漏洞（MS10-005）
BUGTRAQ ID: 38042 CVE ID: CVE-2010-0028 画图是Windows操作系统中默认捆绑的图形编辑软件。 画图工具在解码JPEG图形时存在可导致堆溢出的整数溢出漏洞，用户受骗打开了特制的JPEG图形文件就会导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows 2000SP4 临时解决方法： 禁用或删除画图工具。 厂商补丁： Microsoft...
CVE-2010-0028
Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...
Integer overflow
Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...
CVE-2010-0028
CVE-2010-0028 is a remote code execution vulnerability in Microsoft Paint caused by an integer/heap overflow while decoding JPEG images. Affected software includes Windows 2000 SP4, Windows XP SP2/SP3, and Windows Server 2003 SP2 (Paint decode path). Microsoft released MS10-005 to address the fla...
CVE-2010-0028
Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...
Microsoft Paint Remote Code Execution Vulnerability (978706)
This host is missing a critical security update according to Microsoft Bulletin MS10-005. OpenVAS Vulnerability Test $Id: secpodms10-005.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Paint Remote Code Execution Vulnerability 978706 Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...
