36 matches found
libwmf: heap overflow when decoding BMP images
It was discovered that libwmf did not correctly process certain WMF Windows Metafiles containing BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileges ...
libwmf: heap overflow within the RLE decoding of embedded BMP images
It was discovered that libwmf did not correctly process certain WMF Windows Metafiles with embedded BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileg...
The vulnerability of the SELinux access control system, allowing a perpetrator to execute arbitrary commands
The vulnerability of the SELinux access control system is related to improper handling of file names. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands by adding special metafiles to file names...
MS13-089: Critical Vulnerability in Windows Graphics Device Interface Could Allow Remote Code Execution (2876331)
The remote host contains a version of Microsoft Windows that is affected by a remote code execution vulnerability. The vulnerability exists in the Graphic Rendering Engine, and in the way Windows handles Metafiles. An attacker could exploit this issue to execute arbitrary code on the remote host....
RealNetworks RealPlayer Buffer Overflow (CVE-2004-0258)
RealPlayer is a media player produced by RealNetworks, Inc. that supports a variety of open and proprietary multimedia stream and file formats. Versions of RealPlayer are available for most common platforms such as Windows, Linux, Solaris, etc. There exists a buffer overflow vulnerability in...
Gentoo Security Advisory GLSA 200601-09 (wine)
The remote host is missing updates announced in advisory GLSA 200601-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Debian Security Advisory DSA 1246-1 (openoffice.org)
The remote host is missing an update to openoffice.org announced via advisory DSA 1246-1. John Heasman from Next Generation Security Software discovered a heap overflow in the handling of Windows Metafiles in OpenOffice.org, the free office suite, which could lead to a denial of service and...
Microsoft Windows GDI Metafiles AttemptWrite Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied metafile data. Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of users viewing malicious files. This...
Microsoft Windows GDI code execution
Heap buffer overflow on Windows metafiles parsing...
[SECURITY] [DSA 1246-1] New OpenOffice.org packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1246-1 [email protected] http://www.debian.org/security/ Martin Schulze January 8th, 2007 http://www.debian.org/security/faq -...
DSA-1246-1 openoffice.org
Bulletin has no description...
Microsoft Windows Media Player fails to properly handle malformed Windows Media Metafiles
Overview Windows Media Player does not properly handle malformed Windows Media Metafiles. This vulnerability may allow a remote attacker to execute arbitrary code or crash Windows Media Player. Description Windows Media Player WMP is a multimedia application that comes with Microsoft Windows...
Microsoft Windows XP/2003 Picture and Fax Viewer / Wine / ME code execution
Buffer overflow on parsing WMF metafiles. It may be used for silent Spyware/Trojan installation with Internet Explorer or another browser and also with Lotus Notes. There are vulnerabilities not covered by MS06-001...
MS06-001: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (912919)
The remote host contains a version of Microsoft Windows that is missing a critical security update that fixes several vulnerabilities in the Graphic Rendering Engine, and in the way Windows handles Metafiles. An attacker could exploit these flaws to execute arbitrary code on the remote host. To...
MS05-053: Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424)
The remote host contains a version of Microsoft Windows missing a critical security update to fix several vulnerabilities in the Graphic Rendering Engine, and in the way Windows handles Metafiles. An attacker could exploit these flaws to execute arbitrary code on the remote host by sending a...