CamlImages JPEG处理远程缓冲区溢出漏洞

Bugraq ID: 36713 CVE ID：CVE-2009-3296 CamlImages是一款开放源代码的图像处理库。 CamlImages存在多个整数溢出，可导致可利用的堆溢出，可以应用程序权限执行任意指令。 处理TIFF和JPEG图像文件都存在此漏洞。 CamlImages 2.2 厂商解决方案 Debian linux可参考如下升级程序： Debian Linux 4.0 amd64 Debian libcamlimages-ocaml2.20-8+etch1amd64.deb...

Debian Security Advisory DSA 1912-1 (camlimages)

The remote host is missing an update to camlimages announced via advisory DSA 1912-1. OpenVAS Vulnerability Test $Id: deb19121.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1912-1 camlimages Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1912-1] New camlimages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1912-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 16, 2009 http://www.debian.org/security/faq -...

DSA-1912-1 camlimages - arbitrary code execution

Bulletin has no description...

openSUSE 10 Security Update : xemacs (xemacs-6412)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

Apple QuickTime PictureViewer Buffer Overflow (CVE-2005-0903; CVE-2005-2340)

Apple QuickTime PictureViewer is an image viewer that supports many image file formats. JPEG is one of the image formats supported by this product. A vulnerability exists in the PictureViewer component of the Apple QuickTime products. The affected product does not correctly process JPEG image...

ClamAV AntiVirus cli_check_jpeg_exploit Function Denial of Service (CVE-2008-5314)

ClamAV AntiVirus is an open source product that provides anti-virus scanning utilities and an anti-virus library. The product is capable of decoding and scanning several file formats including image formats like JPEG. A buffer overflow vulnerability exists in the ClamAV AntiVirus product. The...

Botnet Hiding Commands as JPEG Images

Security researchers have stumbled on a new botnet that uses an interesting technique to mask its nefarious intentions. The Monkif/DIKhora botnet, which is pushing out Trojan downloaders to infected machines, is encoding the instructions to appear as if the command-and-control server is returning...

SuSE9 Security Update : libexif (YOU Patch Number 11555)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

Debian: Security Advisory (DSA-1890-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1890-1] New wxwidgets packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1890-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 19, 2009 http://www.debian.org/security/faq -...

DSA-1890-1 wxwidgets2.6 wxwidgets2.8 wxwindows2.4 - arbitrary code execution

Bulletin has no description...

Batch Picture Watemark 1.0 (.jpg File) Local Crash PoC

Exploit for unknown platform in category dos / poc ====================================================== Batch Picture Watemark 1.0 .jpg File Local Crash PoC ====================================================== Anti-Security Research Team & Security Institute + Bug : Batch Picture Watemark v1....

FotoTagger 2.12.0.0 (.XML File) Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== FotoTagger 2.12.0.0 .XML File Buffer Overflow PoC =================================================== Anti-Security Research Team & Security Institute + Bug : FotoTagger v2.12.0.0 Buffer Overflo...

FotoTagger 2.12.0.0 - '.XML' Buffer Overflow (PoC)

""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" """ :::::: :: :: :: :: :: :::: """ """ :: :: :: :: :::::: .. :::: :: """ """ ::::: ::: ::::: :: :: :: :: :: :::: """ """ :: :: :: :: : :: :: :: :: :: :: """ """ :::::: :: :: ::::: :: :::::: :: :: :::: rs.ir """ """ :: """ """ """...

Ubuntu USN-824-1 (php5)

The remote host is missing an update to php5 announced via advisory USN-824-1. OpenVAS Vulnerability Test $Id: ubuntu8241.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8241.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-824-1 php5 Authors: Thomas...

Mandrake Security Advisory MDVSA-2009:204 (wxgtk)

The remote host is missing an update to wxgtk announced via advisory MDVSA-2009:204. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Ubuntu: Security Advisory (USN-824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : xemacs (xemacs-1182)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : xemacs (xemacs-1182)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...