CVE-2008-3796

CVE-2008-3796 concerns the Flash decoder engine swfdec . The vulnerability affects swfdec 0.6 and older, with versions before 0.6.8 allowing remote attackers to crash the application (denial of service) by presenting a crafted 1x1 JPEG image. Public descriptions in multiple sources (NVD, SUSE/SUS...

CVE-2008-3796

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service application crash via a 1x1 JPEG image...

CVE-2008-3796: Improper Input Validation

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service application crash via a 1x1 JPEG image...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

DEBIAN-CVE-2008-3134

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

CVE-2008-3134: Undefined Security Weakness

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

Update Protection against Microsoft MJPEG Decoder Vulnerability (MS08-033)

A remote code execution vulnerability has been reported in the way that the Windows MJPEG Codec handles MJPEG streams in media files. MJPEG is a media file that contains a number of JPEG images that have been connected together to create a video stream. A remote attacker may exploit this...

MS Windows JPEG Processing Buffer Overrun Exploit (MS04-028)

No description provided by source. !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering the mouse over the image...

MS Windows Color Management Module Overflow Exploit (MS05-036)

No description provided by source. / Author: snooq http://www.redpuffer.net/snooq/web/ Date: 21 July 2005 When I looked at the PoC posted on bugtraq.... I was basically quite disappointed. The 'PoC' fixed 'tag count' to a large number.. but this code path does not seem to be exploitable...

GraphicsMagick多个拒绝服务漏洞

BUGTRAQ ID: 30055 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的AVI、AVS、DCM、EPT、FITS、MTV、PALM、RLA和TGA解码器中存在多个漏洞，可能触发崩溃、分配过多内存或执行死循环。 GraphicsMagick的magick/image.c文件中的GetImageCharacteristics函数中存在漏洞，如果用户受骗打开了特制的PNG、JPEG、BMP或TIFF文件的话，就会导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3 GraphicsMagick Grou...

Mozilla Firefox 3.0 - '.JPEG' File Denial of Service

source: https://www.securityfocus.com/bid/29984/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. This issue affects Firefox 3 running on Ubuntu Linux 8.04;...

MS Windows JPEG GDI+ Overflow Shellcoded Exploit

No description provided by source. // launch a local cmd.exe not bound to the net... // GDI+ buffer overrun exploit by FoToZ // NB: the headers here are only sample headers taken from a .JPG file, // with the FF FE 00 01 inserted in header1. // Sample shellcode is provided // You can put approx...

MS Windows JPEG GDI+ All-In-One Bind/Reverse/Admin/FileDownload

No description provided by source. / Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha, romhack Peter Winter-Smith,...

Motorola RAZR JPEG处理缓冲区溢出漏洞

Motorola RAZR是一款流行的手机。 Motorola RAZR包含的JPEG缩略图组件处理JPEG图像存在边界条件错误，远程攻击者可以利用漏洞使设备停止响应，造成拒绝服务攻击。 EXIF解析器的JPEG缩略图组件存在缺陷，一个破坏的JPEG图像，通过MMS发送到目标机器，可导致内存破坏而使设备停止响应，可能导致任意代码执行。 Motorola RAZR 厂商解决方案 供应商建议升级到最新固件版本： http://direct.motorola.com/hellomoto/NSS/updatemysoftware.asp...

MS Windows JPEG GDI+ Overflow Download Shellcode Exploit (MS04-028)

No description provided by source. / =============================================================== Windows JPEG GDI+ Overflow Download Shellcoded Exploit MS04-028 Coded By ATmaCA Credit to eEye Digital Security,K-OTik Security,FoToZ,pathetic. E-Mail:[email protected] Web:www.prohack.net...

MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)

No description provided by source. !/bin/sh MS04-028 Exploit PoC II with Shellcode: CreateUser X in Administrators Group Tested on: WinXP Professional English SP1 - GDIPLUS.DLL version 5.1.3097.0 WinXP Professional Italian SP1 - GDIPLUS.DLL version 5.1.3101.0 SP2 is not vulnerable, don't waste yo...

MS Windows JPEG GDI+ Remote Heap Overflow Exploit (MS04-028)

No description provided by source. / GDI+ JPEG Remote Exploit By John Bissell A.K.A. HighT1mes Exploit Name: ============= JpegOfDeath.c v0.5 Date Exploit Released: ====================== Sep, 23, 2004 Description: ============ Exploit based on FoToZ exploit but kicks the exploit up a notch by...

Stack overflow

Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption...

CVE-2008-2548

Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption...

CVE-2008-2548

CVE-2008-2548 affects Motorola RAZR firmware where the JPEG thumbprint component of the EXIF parser is vulnerable to a stack-based buffer overflow. A malformed JPEG image sent via MMS can trigger memory corruption, allowing remote attackers to execute arbitrary code; exploitation requires user in...