349 matches found
CVE-2006-3376
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...
CVE-2006-3376: Undefined Security Weakness
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...
PT-2006-4268 · Linux +1 · Libgsf +7
Name of the Vulnerable Software and Affected Versions: libwmf version 0.2.8.4 Description: The issue is related to an integer overflow in the player.c file of libwmf, which can be exploited by remote attackers to execute arbitrary code. This is achieved through the MaxRecordSize header field in a...
libwmf -- integer overflow vulnerability
Secunia reports: infamous41md has reported a vulnerability in libwmf, which potentially can be exploited by malicious people to compromise an application using the vulnerable library. The vulnerability is caused due to an integer overflow error when allocating memory based on a value taken direct...
libwmf integer/heap overflow
Sorry I don't have time to chase down multiple email addresses of alleged developers; so here this is after weeks of no response. POC is not attached unlike advisory says. It's not very difficult to exploit. ++++++++++++++++++++++++++++++++++++++++++++ Subject: libwmf integer/heap overflow...
libwmf integer overflow
Integer overflow causes heap overflow...
Mandrake Linux Security Advisory : libwmf (MDKSA-2006:114-1)
Multiple buffer overflows in the gd graphics library libgd 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function. CVE-2004-0941 Integer overflows were reported in the GD Graphics...
[Full-disclosure] [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:114 http://www.mandriva.com/security/ Package : libwmf Date : June 27, 2006 Affected: 10.2, 2006.0, Corporate 3.0 Problem Description: Integer overflows were reported in the GD Graphics Library libgd 2.0.28,...