Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering CMP Fencepost Denial of Service

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering CMP Fencepost Denial of Service source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue...

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering Buffer Overflow

Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering Buffer Overflow source: https://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the...

Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Buffer Overflow

source: https://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the application to properly bounds check input data prior to copying it to a fixe...

Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service

source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282. This issue was identified by...

Microsoft Internet Explorer / MSN - ICC Profiles Crash (PoC)

/-----------------------------edwardgagnon--------------/ Can crash msn and execute commands Windows has a buffer overflow vulnerability in the processing of embedded ICC Profiles inside images jpeg, tiff, etc... To test - create a jpeg in adobe photoshop and save it with the ICC checkbox enabled...

Slackware 10.0 / 9.0 / 9.1 / current : Qt (SSA:2004-236-01)

New Qt packages are available for Slackware 9.0, 9.1, 10.0, and -current to fix security issues. Bugs in the routines that handle PNG, BMP, GIF, and JPEG images may allow an attacker to cause unauthorized code to execute when a specially crafted image file is processed. These flaws may also cause...

CVE-2004-2179

asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service hang via a JPEG image with maximum height and width values...

CVE-2004-2179

CVE-2004-2179 affects asycpict.dll used in Microsoft FrontPage 97/98; allows remote DoS by sending a JPEG with maximum height/width, causing a hang. Red Hat and CVE lists mirror the description; no remediation details are provided in the connected documents. Exploit details and fix/version inform...

Debian DSA-729-1 : php4 - missing input sanitising

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in woody as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation. %NASLMINLEVE...

gd security update

CentOS Errata and Security Advisory CESA-2004:638 Updated gd packages that fix security issues with overflow in various memory allocation calls are now available. Updated 24 May 2005 Multilib packages have been added to this advisory The gd packages contain a graphics library used for the dynamic...

[SECURITY] [DSA 729-1] New PHP4 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 729-1 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1552

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image...

CVE-2005-1552

GeoVision Digital Video Surveillance System versions 6.04, 6.1 and 7.0 expose JPEG images despite having a password/username set, due to improper protection of image files. The issue allows remote attackers to obtain sensitive information by making a direct request to the image, effectively bypas...

CVE-2005-1552

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image...

GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access

GeoVision Digital Surveillance System 6.0 46.1 - Unauthorized .JPEG Image Access source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue...

GeoVision Digital Surveillance System 6.0 4/6.1 - Unauthorized '.JPEG' Image Access

source: https://www.securityfocus.com/bid/13571/info GeoVision Digital Surveillance System is prone to a vulnerability that allows remote unauthorized attackers to view JPEG images stored on a server. This issue results from an access validation error. GeoVision Digital Surveillance System versio...

GeoHttpServer Unauthorized Image Access Vulnerability

The GeoVision Digital Surveillance System installed on the remote host suffers from a vulnerability that enables anyone to bypass authentication and view JPEG images stored on the server by calling them directly. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18220;...

security flaw

The phpnextmarker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service infinite loop via a JPEG image with an invalid marker value, which causes a negative length value to be passed to...

CVE-2005-0525

The phpnextmarker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service infinite loop via a JPEG image with an invalid marker value, which causes a negative length value to be passed to...

CVE-2005-0903

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service application crash via a JPEG file with crafted Huffman Table marker DHT data...