PT-2013-2604

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 19.0 Thunderbird versions prior to 17.0.3 SeaMonkey versions prior to 2.16 Description A use-after-free issue in the nsDisplayBoxShadowOuter::Paint function allows remote attackers to execute arbitrary code or...

Microsoft Paint 5.1 Memory Corruption

!/usr/bin/perl Title : Microsoft Paint 5.1 memory corruption Version : build 2600.xpsp Service Pack3 Date : 2012-10-21 Vendor : http://www.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Notice : for testing POC...

Microsoft Paint 5.1 - .bmp Denial of Service

Microsoft Paint 5.1 - .bmp Denial of Service source: https://www.securityfocus.com/bid/56311/info Microsoft Paint is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application. Due to the nature of the issue code execution might be...

Microsoft Paint 5.1 - '.bmp' Denial of Service

source: https://www.securityfocus.com/bid/56311/info Microsoft Paint is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application. Due to the nature of the issue code execution might be possible, but it has not been confirmed. Microsoft...

Microsoft Paint 5.1 Memory Corruption

notice : for testing POC please run the Microsoft Pain under a debugger and then open the POC file. Memory corruption during the handling of the bmp files a context-dependent attacker can execute arbitrary code. !/usr/bin/perl Title : Microsoft Paint 5.1 memory corruption Version : build 2600.xps...

VulnCheck KEV: CVE-2010-0028

Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG .JPG file, aka "MS Paint Integer Overflow Vulnerability."...

CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

CVE-2012-2880

Removed by vendor...

CVE-2012-2880

CVE-2012-2880 corresponds to a Chrome/Chromium race condition in the plug-in paint buffer that could lead to DoS or other impact. Connected sources confirm Chromium/Chrome were updated to a fixed version; Gentoo GLSA-201210-07 specifies upgrading to Chromium 22.0.1229.94 or newer, and openSUSE/Op...

CVE-2012-2880: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

PT-2012-4329

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A race condition issue exists, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts. This issue is related to vectors involving the plug-in...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Corel PHOTO‑PAINT and CorelDRAW X5 (version 15.1.0.588) are affected by multiple untrusted search path vulnerabilities that allow local users to gain privileges when a Trojan horse in the current working directory precedes legitimate DLLs. The root cause is untrusted search paths involving dwmapi...

CVE-2010-5240: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

PT-2012-1450

Name of the Vulnerable Software and Affected Versions CorelDRAW X5 version 15.1.0.588 Corel PHOTO-PAINT version 15.1.0.588 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll or CrlRib.dll file in the current working directory. This can be demonstrated by a...

Scientific Linux Security Update : gimp on SL5.x i386/x86_64

The GIMP GNU Image Manipulation Program is an image composition and editing program. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially...

CentOS Update for gimp CESA-2011:0837 centos4 x86_64

Check for the Version of gimp OpenVAS Vulnerability Test CentOS Update for gimp CESA-2011:0837 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...