Microsoft Excel fails to properly parse malformed Palette records

Overview A vulnerability in the way that Microsoft Excel handles malformed Palette records could allow an attacker to execute arbitrary code on a vulnerable system. Description Microsoft Excel fails to properly handle Palette records embedded in Excel documents. When a file containing a malformed...

CVE-2005-4048

CVE-2005-4048 is corroborated across OpenVAS/Gentoo/Ubuntu advisories tied to FFmpeg libavcodec up to 0.4.9-pre1 and earlier. A heap-based buffer overflow in avcodec_default_get_buffer (utils.c) can be triggered by crafted small PNG images with palettes, potentially enabling remote command execut...

ffmpeg -- libavcodec buffer overflow vulnerability

Secunia reports: Simon Kilvington has reported a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the "avcodecdefaultgetbuffer"...