6327 matches found
MS Windows Color Management Module Overflow Exploit (MS05-036)
No description provided by source. / Author: snooq http://www.redpuffer.net/snooq/web/ Date: 21 July 2005 When I looked at the PoC posted on bugtraq.... I was basically quite disappointed. The 'PoC' fixed 'tag count' to a large number.. but this code path does not seem to be exploitable...
MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)
No description provided by source. !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering the mouse over the image...
GraphicsMagick多个拒绝服务漏洞
BUGTRAQ ID: 30055 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的AVI、AVS、DCM、EPT、FITS、MTV、PALM、RLA和TGA解码器中存在多个漏洞，可能触发崩溃、分配过多内存或执行死循环。 GraphicsMagick的magick/image.c文件中的GetImageCharacteristics函数中存在漏洞，如果用户受骗打开了特制的PNG、JPEG、BMP或TIFF文件的话，就会导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3 GraphicsMagick Grou...
Mozilla Firefox 3.0 - '.JPEG' File Denial of Service
source: https://www.securityfocus.com/bid/29984/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. This issue affects Firefox 3 running on Ubuntu Linux 8.04;...
Motorola RAZR JPEG处理缓冲区溢出漏洞
Motorola RAZR是一款流行的手机。 Motorola RAZR包含的JPEG缩略图组件处理JPEG图像存在边界条件错误，远程攻击者可以利用漏洞使设备停止响应，造成拒绝服务攻击。 EXIF解析器的JPEG缩略图组件存在缺陷，一个破坏的JPEG图像，通过MMS发送到目标机器，可导致内存破坏而使设备停止响应，可能导致任意代码执行。 Motorola RAZR 厂商解决方案 供应商建议升级到最新固件版本： http://direct.motorola.com/hellomoto/NSS/updatemysoftware.asp...
MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload
No description provided by source. / Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith,...
MS Windows JPEG GDI+ Overflow Shellcoded Exploit
No description provided by source. // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ // NB: the headers here are only sample headers taken from a .JPG file, // with the FF FE 00 01 inserted in header1. // Sample shellcode is provided // You can put approx...
MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)
No description provided by source. / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by...
MS Windows JPEG GDI+ Overflow Download Shellcode Exploit (MS04-028)
No description provided by source. / =============================================================== Windows JPEG GDI+ Overflow Download Shellcoded Exploit MS04-028 Coded By ATmaCA Credit to eEye Digital Security,K-OTik Security,FoToZ,pathetic. E-Mail:[email protected] Web:www.prohack.net...
MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)
No description provided by source. !/bin/sh MS04-028 Exploit PoC II with Shellcode: CreateUser X in Administrators Group Tested on: WinXP Professional English SP1 - GDIPLUS.DLL version 5.1.3097.0 WinXP Professional Italian SP1 - GDIPLUS.DLL version 5.1.3101.0 SP2 is not vulnerable, don't waste yo...
Stack overflow
Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption...
CVE-2008-2548
Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption...
CVE-2008-2548
CVE-2008-2548 affects Motorola RAZR firmware where the JPEG thumbprint component of the EXIF parser is vulnerable to a stack-based buffer overflow. A malformed JPEG image sent via MMS can trigger memory corruption, allowing remote attackers to execute arbitrary code; exploitation requires user in...
[SECURITY] Fedora 8 Update: cbrpager-0.9.17-2.fc8
A no-nonsense, simple to use, small viewer for cbr and cbz comic book archive files. As it is written in C, the executable is small and fast. It views jpg or jpeg, gif and png images, and you can zoom in and out...
Motorola RAZR cell phones buffer overflow
Buffer overflow on JPEG images processing...
ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability
ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-033 May 27, 2008 -- Affected Vendors: Motorola -- Affected Products: Motorola RAZR -- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary cod...
Motorola RAZR JPG处理栈溢出漏洞
RAZR是摩托罗拉推出的一款超薄手机。 RAZR手机的EXIF解析器中的JPEG缩略图组件中存在栈溢出漏洞，如果用户通过彩信接收到了恶意的JPEG图形文件的话，就可以触发这个溢出，导致执行任意指令。 Motorola RAZR Motorola -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://direct.motorola.com/hellomoto/NSS/updatemysoftware.asp...
Microsoft Windows CE JPEG和GIF图形处理任意代码执行漏洞
BUGTRAQ ID: 29147 Windows CE为微软针对个人电脑以外的计算机产品所研发的嵌入式操作系统。 Windows CE的JPEG图形（GDI+）和GIF图形组件在处理恶意图形文件时存在多个安全漏洞，可能导致在用户系统上执行任意指令。 Microsoft Windows CE 5.0 Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.microsoft.com/technet/security/...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the JPEG GDI+ and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted 1 JPEG and 2 GIF images...
CVE-2008-2160
Multiple unspecified vulnerabilities in the JPEG GDI+ and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted 1 JPEG and 2 GIF images...