7147 matches found
Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities
Exploit for multiple platform in category dos / poc ================================================================== Opera = 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities ================================================================== Opera JPEG processing - Heap corruption...
Opera 9.10 - .jpg Image DHT Marker Heap Corruption
Opera 9.10 - .jpg Image DHT Marker Heap Corruption Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...
FreeBSD : opera -- multiple vulnerabilities (78ad2525-9d0c-11db-a5f6-000c6ec775d9)
iDefense reports : The vulnerability specifically exists due to Opera improperly processing a JPEG DHT marker. The DHT marker is used to define a Huffman Table which is used for decoding the image data. An invalid number of index bytes in the DHT marker will trigger a heap overflow with partially...
Opera Web浏览器JPEG图形DHT标记堆溢出漏洞
Opera是一款流行的WEB浏览器,支持多种平台。 Opera没有正确地处理JPEG文件头中的DHT标记,远程攻击者可能利用此漏洞控制用户机器。 如果DHT标记中包含有无效的索引字节数的话,攻击者就可以触发堆溢出,导致执行任意指令。 Opera Software Opera 9.02 Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.opera.com...
Opera 9.10 - '.jpg' Image DHT Marker Heap Corruption
Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=457...
opera -- multiple vulnerabilities
iDefense reports: The vulnerability specifically exists due to Opera improperly processing a JPEG DHT marker. The DHT marker is used to define a Huffman Table which is used for decoding the image data. An invalid number of index bytes in the DHT marker will trigger a heap overflow with partially...
kdegraphics KDE graphics library DoS
Malformed EXIF section of JPEG file causes infinite recursion with stack overflow stack memory consumption...
[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:227 http://www.mandriva.com/security/ Package : kdegraphics Date : December 11, 2006 Affected: 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: Stack overflow in the KFILE JPEG kfilejpeg plugin in...
CVE-2006-6297
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
CVE-2006-6297
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
CVE-2006-6297
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
CVE-2006-6297
CVE-2006-6297 affects KDE kdegraphics components, notably the kdegraphics-kfile-plugins (kfile_jpeg) used by Konqueror, digiKam and other KDE image viewers. The issue is a stack consumption/stack overflow vulnerability in the kfile_jpeg EXIF handling that can trigger a denial of service via a cra...
CVE-2006-6297
Stack consumption vulnerability in the KFILE JPEG kfilejpeg plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service stack consumption via a crafted EXIF section in a JPEG file, which results in an infinite recursio...
KDE JPEG KFile Info插件EXIF本地拒绝服务漏洞
JPEG kfile-info插件用于多个KDE应用程序显示图象META信息。 JPEG kfile-info插件在解析图象META信息时存在问题,本地攻击者可以利用漏洞对使用此插件的应用程序进行拒绝服务攻击。 目前没有详细漏洞细节提供。 KDE KDE 3.5.5 KDE KDE 3.5.4 KDE KDE 3.5.3 KDE KDE 3.5.2 KDE KDE 3.5 KDE KDE 3.4.3 - Gentoo Linux KDE KDE 3.4.2 KDE KDE 3.4.1 + RedHat Fedora Core4 KDE KDE 3.4 KDE KDE 3.4 KDE KD...
DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload
DZCP deV!Lz Clanportal 1.3.6 - Arbitrary File Upload S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP code a...
[Full-disclosure] deV!L`z Clanportal - Arbitrary File Upload [061124b]
/ -061124b- | deV!Lz Clanportal - Arbitrary File Upload | / S Y N O P S I S / =================' - access: remote severity: high - deV!Lz Clanportal allows nearly arbitrary files to be uploaded and stored on the server's filesystem, which enables anyone, even without a user account, to upload PHP...
CVE-2006-4806
CVE-2006-4806 describes multiple integer overflows in imlib2 image loaders (ARGB, PNG, LBM, JPEG, TIFF) that can cause denial of service and potentially arbitrary code execution via crafted images. Affected components are the image loaders (loader_argb.c, loader_png.c, loader_lbm.c, loader_jpeg.c...
CVE-2006-4806
Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 ARGB loaderargb.c, 2 PNG loaderpng.c, 3 LBM loaderlbm.c, 4 JPEG loaderjpeg.c, or 5 TIFF loadertiff.c images...
CVE-2006-4806
Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1 ARGB loaderargb.c, 2 PNG loaderpng.c, 3 LBM loaderlbm.c, 4 JPEG loaderjpeg.c, or 5 TIFF loadertiff.c images...
Debian DSA-1028-1 : libimager-perl - programming error
Kjetil Kjernsmo discovered a bug in libimager-perl, a Perl extension for generating 24 bit images, which can lead to a segmentation fault if it operates on 4-channel JPEG images. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...