1229 matches found
Vulnerabilities in XnViewer Could Allow Remote Code Execution
Executive Summary Microsoft is providing notification of the discovery and remediation of two integer overflow vulnerabilities affecting XnViewer version 1.98.2 and earlier versions. Microsoft discovered and disclosed the vulnerabilities under coordinated vulnerability disclosure to the affected...
Adobe Reader Image Texture Malformed PSD File Memory Corruption (APSB11-03; CVE-2011-0593)
Adobe Acrobat and Reader products include a plugin to parse the U3D image files inside PDF documents. The Universal 3D format can link to external image files, for example in PSD format, that provide texture data for the 3D objects. The .PSD Photoshop Document, Adobe Photoshop's native format,...
SuSE 10 Security Update : gimp (ZYPP Patch Number 6880)
Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...
SuSE 10 Security Update : gimp (ZYPP Patch Number 6882)
Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...
SuSE 11 Security Update : gimp (SAT Patch Number 2155)
Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. CVE-2009-1570 / CVE-2009-3909 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
CVE-2010-1845
ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...
Memory corruption
ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...
CVE-2010-1845
CVE-2010-1845 affects ImageIO in Mac OS X 10.5.8 and 10.6.x up to 10.6.4; a crafted PSD image can cause memory corruption, leading to arbitrary code execution or application crash. Public data from NVD and Vulners DOC confirms the issue: ImageIO’s PSD handling is the vulnerable component, with im...
CVE-2010-1845
ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...
Design/Logic Flaw
Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...
IrfanView Buffer Overflow Vulnerabilities
IrfanView is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1509
IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow,...
CVE-2010-1510
Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...
Heap overflow
Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...
Heap overflow
IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow,...
CVE-2010-1510
Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...
CVE-2010-1509
IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow,...
CVE-2010-1510
CVE-2010-1510 affects IrfanView prior to 4.27, where parsing PSD images with RLE compression can trigger a heap-based buffer overflow, leading to a possible crash or remote code execution. Public sources consistently describe this in IrfanView’s PSD RLE decompression path, with Secunia citing the...
CVE-2010-1509
IrfanView (before version 4.27) is vulnerable to a PSD parsing issue caused by a sign-extensions/unspecified integer variable handling error that can trigger a heap-based buffer overflow. This may allow a remote attacker to crash the application or potentially execute arbitrary code via a special...
