Microsoft Paint 5.1 Memory Corruption

notice : for testing POC please run the Microsoft Pain under a debugger and then open the POC file. Memory corruption during the handling of the bmp files a context-dependent attacker can execute arbitrary code. !/usr/bin/perl Title : Microsoft Paint 5.1 memory corruption Version : build 2600.xps...

VulnCheck KEV: CVE-2010-0028

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...

CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

CVE-2012-2880

CVE-2012-2880 corresponds to a Chrome/Chromium race condition in the plug-in paint buffer that could lead to DoS or other impact. Connected sources confirm Chromium/Chrome were updated to a fixed version; Gentoo GLSA-201210-07 specifies upgrading to Chromium 22.0.1229.94 or newer, and openSUSE/Op...

CVE-2012-2880

Removed by vendor...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Corel PHOTO‑PAINT and CorelDRAW X5 (version 15.1.0.588) are affected by multiple untrusted search path vulnerabilities that allow local users to gain privileges when a Trojan horse in the current working directory precedes legitimate DLLs. The root cause is untrusted search paths involving dwmapi...

Scientific Linux Security Update : gimp on SL5.x i386/x86_64

The GIMP GNU Image Manipulation Program is an image composition and editing program. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially...

CentOS Update for gimp CESA-2011:0837 centos4 x86_64

Check for the Version of gimp OpenVAS Vulnerability Test CentOS Update for gimp CESA-2011:0837 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Microsoft Paint JPEG Image Parsing Integer Overflow (MS10-005; CVE-2010-0028)

A remote code execution vulnerability has been reported in Microsoft Paint...

Fedora Update for kolourpaint FEDORA-2011-13417

Check for the Version of kolourpaint OpenVAS Vulnerability Test Fedora Update for kolourpaint FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 16 Update: kolourpaint-4.7.1-1.fc16

An easy-to-use paint program...

CVE-2011-1782

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...

Heap overflow

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...

CVE-2011-1782

CVE-2011-1782 is a heap-based buffer overflow in GIMP 2.6.11’s PSP PSP_read_channel_data() when processing PSP_COMP_RLE images that terminate with a long run count. This can crash or potentially execute code via crafted PSP images. Public mentions across Nessus/SUSE advisories confirm the issue a...

CVE-2011-1782

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...

PT-2011-3363 · Gnu +1 · Gimp +1

Name of the Vulnerable Software and Affected Versions: GIMP version 2.6.11 Description: The issue is related to a heap-based buffer overflow in the read channel data function in the Paint Shop Pro PSP plugin. This can be triggered by a PSP COMP RLE aka RLE compression image file that begins a lon...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...