Vulnerabilities in XnViewer Could Allow Remote Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of two integer overflow vulnerabilities affecting XnViewer version 1.98.2 and earlier versions. Microsoft discovered and disclosed the vulnerabilities under coordinated vulnerability disclosure to the affected...

Adobe Reader Image Texture Malformed PSD File Memory Corruption (APSB11-03; CVE-2011-0593)

Adobe Acrobat and Reader products include a plugin to parse the U3D image files inside PDF documents. The Universal 3D format can link to external image files, for example in PSD format, that provide texture data for the 3D objects. The .PSD Photoshop Document, Adobe Photoshop's native format,...

PT-2011-2480

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue is related to a remote code execution vulnerability in Adobe Acrobat Reader, specifically in the U3D Texture psd RLE Decompression. Recommendations At the moment, there...

SuSE 10 Security Update : gimp (ZYPP Patch Number 6880)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...

SuSE 10 Security Update : gimp (ZYPP Patch Number 6882)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. - CVE-2009-3909: CVSS v2 Base Score: 4.3 moderate AV:N/AC:M/Au:N/C:N/I:N/A:P: Numeric Errors. CWE-189. CVE-2009-1570...

SuSE 11 Security Update : gimp (SAT Patch Number 2155)

Integer overflows in the BMP and PSD plug-ins potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files. CVE-2009-1570 / CVE-2009-3909 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2010-1845

ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...

Memory corruption

ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...

CVE-2010-1845

ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...

CVE-2010-1845

CVE-2010-1845 affects ImageIO in Mac OS X 10.5.8 and 10.6.x up to 10.6.4; a crafted PSD image can cause memory corruption, leading to arbitrary code execution or application crash. Public data from NVD and Vulners DOC confirms the issue: ImageIO’s PSD handling is the vulnerable component, with im...

PT-2010-3471

Name of the Vulnerable Software and Affected Versions ImageIO in Apple Mac OS X versions 10.5.8 and 10.6.x through 10.6.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted PSD...

CVE-2010-1845: Improper Input Validation

ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PSD image...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or Wintab32.dll that is located in the same folder as a PSD or other file that is...

IrfanView Buffer Overflow Vulnerabilities

IrfanView is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1509

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow,...

CVE-2010-1510

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...

Heap overflow

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...

Heap overflow

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow,...

CVE-2010-1509

IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow,...

CVE-2010-1510

Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PSD image with RLE compression...