CVE-2009-2660

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to 1 crafted GIF files gifread.c and 2 crafted JPEG files jpegread.c, a different...

CVE-2009-2660

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to 1 crafted GIF files gifread.c and 2 crafted JPEG files jpegread.c, a different...

CVE-2009-2660

CVE-2009-2660 describes multiple integer overflows in the CamlImages library (versions around 2.x) that can cause heap-based buffer overflows when processing large images. The affected areas include GIF and JPEG handling (gifread.c and jpegread.c) as well as PNG-related paths (read_png_file and r...

CVE-2009-2660

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to 1 crafted GIF files gifread.c and 2 crafted JPEG files jpegread.c, a different...

CVE-2009-2369

Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is...

CVE-2009-2369

Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is...

Integer overflow

Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is...

CVE-2009-2369

Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is...

CVE-2009-2369

The CVE-2009-2369 entry documents an integer overflow in wxWidgets’ wxImage::Create() within src/common/image.cpp, affecting wxWidgets 2.8.x (notably 2.8.10). The issue can trigger a heap-based buffer overflow via a crafted JPEG, enabling a denial of service and, potentially, arbitrary code execu...

Mandrake Security Advisory MDVSA-2009:145 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:145. OpenVAS Vulnerability Test $Id: mdksa2009145.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:145 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:145 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:145. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

PHP memory corruption

Memory corruption on EXIF data parsgin from JPEG file via exifreaddata...

XEmacs多个整数溢出漏洞

Bugraq ID: 35473 XEmacs是一款强大的文本编辑器。 XEmacs存在多个漏洞，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 -glyphs-eimage.c包含的"tiffinstantiate"函数存在整数溢出错误，构建特殊的TIFF文件可触发。 -glyphs-eimage.c包含的"pnginstantiate"函数存在整数溢出错误，构建特殊的PNG文件可触发。 -glyphs-eimage.c包含的"jpeginstantiate"函数存在整数溢出错误，构建特殊的JPEG文件可触发。 XEmacs 21.4.22 目前没有解决方案提供：...

Ubuntu 8.10 : clamav vulnerability (USN-684-1)

Ilja van Sprundel discovered that ClamAV did not handle recursive JPEG information. If a remote attacker sent a specially crafted JPEG file, ClamAV would crash, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

MDVA-2009:018-1 : clamav

This update fixes several issues with clamav: - update unexpectely changes location of clamd socket 46459 - clamav-milter was not built 46555 - Clamav-milter wanted to remove postfix 46556 - Scanning mail with clamav leaves a big temporary folder 46642 - Build fails if invoked with --with milter,...

MDVA-2009:018 : clamav

This update fixes several issues with clamav: - update unexpectely changes location of clamd socket 46459 - clamav-milter was not built 46555 - Clamav-milter wanted to remove postfix 46556 - Scanning mail with clamav leaves a big temporary folder 46642 - Build fails if invoked with --with milter,...

Mandrake Linux Security Advisory : ghostscript (MDKSA-2007:208)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Newer versions of ghostscript contain an embedded copy of libjasper and as such is vulnerable to this issue. Updated packages...

Mandriva Linux Security Advisory : clamav (MDVSA-2008:239)

Ilja van Sprundel found that ClamAV contained a denial of service vulnerability in how it handled processing JPEG files, due to it not limiting the recursion depth when processing JPEG thumbnails CVE-2008-5314. Other bugs have also been corrected in 0.94.2 which is being provided with this update...

Microsoft DirectShow memory corruption

Memory corruption on Motion JPEG files decompression...

Mandriva Update for netpbm MDKSA-2007:209 (netpbm)

Check for the Version of netpbm OpenVAS Vulnerability Test Mandriva Update for netpbm MDKSA-2007:209 netpbm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...