CVE-2008-6070

Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of...

CVE-2008-6070

Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of...

CVE-2008-6070

Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted PALM image, a different vulnerability than CVE-2007-0770. NOTE: some of...

Unfixed XSS vulnerability at www.palm-investments.de

Security researcher SaMTHG, has submitted on 25/10/2008 a cross-site-scripting XSS vulnerability affecting www.palm-investments.de, which at the time of submission ranked 15715399 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It i...

Gentoo Security Advisory GLSA 200611-07 (graphicsmagick)

The remote host is missing updates announced in advisory GLSA 200611-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200611-19 (imagemagick)

The remote host is missing updates announced in advisory GLSA 200611-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Palm OS Centro screen lock protection bypass

It's possible to enter main menu during emergency call dialing...

false vulnerability report

Hi As the author, I would like to request a removal of one of my vulnerability articles. http://securityvulns.com/Udocument99.html The reason for this is because I've recently tested the "exploit" on other palm centro phones, and the exploit would not work for them. It seems to only work on my...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

GraphicsMagick多个拒绝服务漏洞

BUGTRAQ ID: 30055 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的AVI、AVS、DCM、EPT、FITS、MTV、PALM、RLA和TGA解码器中存在多个漏洞，可能触发崩溃、分配过多内存或执行死循环。 GraphicsMagick的magick/image.c文件中的GetImageCharacteristics函数中存在漏洞，如果用户受骗打开了特制的PNG、JPEG、BMP或TIFF文件的话，就会导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3 GraphicsMagick Grou...

Debian Security Advisory DSA 1260-1 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory DSA 1260-1. Vladimir Nadvornik discovered that the fix for a vulnerability in the PALM decoder of Imagemagick, a collection of image manipulation programs, was ineffective. To avoid confusion a new CVE ID has been assigned...

Debian: Security Advisory (DSA-1260-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 7 Update: kdepim-3.5.8-5.svn20071013.ent.fc7

PIM Personal Information Manager applications, including: akregator: feed aggregator kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal, appointments, events, todos kpilot: HotSync=C2=AE software for Palm OS=C2=AE devi...

Ubuntu 5.10 / 6.06 LTS / 6.10 : imagemagick vulnerabilities (USN-422-1)

Vladimir Nadvornik discovered that the fix for CVE-2006-5456, released in USN-372-1, did not correctly solve the original flaw in PALM image handling. By tricking a user into processing a specially crafted image with an application that uses imagemagick, an attacker could execute arbitrary code...

openSUSE 10 Security Update : ImageMagick (ImageMagick-2235)

Two security problems were found in GraphicsMagick which are also present in ImageMagick. CVE-2006-5456: Multiple buffer overflows in ImageMagick allowed user-assisted attackers to cause a denial of service and possibly execute arbitrary code via 1 a DCM image that is not properly handled by the...

CVE-2007-4213

Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service device reset or hang via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293...

Code injection

Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service device reset or hang via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293...

CVE-2007-4213

CVE-2007-4213 affects Palm OS on Treo smartphones (650, 680, 700p, 755p). A remote attacker can cause a denial of service (device reset/hang) by sending a flood of large ICMP echo requests to the device, typically via the data network. The issue is described in Symantec’s SYMSA-2007-007 advisory,...

CVE-2007-4213

Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service device reset or hang via a flood of large ICMP echo requests. NOTE: this is probably a different vulnerability than CVE-2003-0293...

Palm Treo智能手机远程拒绝服务漏洞

BUGTRAQ ID: 25074 CVECAN ID: CVE-2007-4213 Treo系列是运行Palm操作系统的智能手机。 Treo手机在处理ICMP请求时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果运行Palm操作系统的Treo手机连接到了数据网络并允许入站ICMP通讯的话，攻击者就可以通过向为手机所分配的IP地址连续发送大小为1470字节的ICMP回显请求导致设备待机、软重启或断开连接。降低报文大小但增加发送间隔时间也可以实现同样的效果。 Palm Treo Smartphone 755p Palm Treo Smartphone 700p Palm Treo...