OpenJDK: image parser insufficient raster parameter checks (2D, 8001972)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto...

OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors relat...

OpenJDK: image parser insufficient raster parameter checks (AWT, 8002325)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors relat...

OpenJDK: image parser insufficient raster parameter checks (2D, 8001972)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto...

Fedora Update for gdal FEDORA-2013-1490

Check for the Version of gdal OpenVAS Vulnerability Test Fedora Update for gdal FEDORA-2013-1490 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 17 Update: gdal-1.9.1-14.fc17.1

Geospatial Data Abstraction Library GDAL/OGR is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline...

XnView < 1.99.0 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is earlier than 1.99.0. It therefore is reportedly affected by the following heap-based buffer overflow vulnerabilities : - An integer truncation issue exists related to the handling of the depth value in 'Sun Raster' RAS image files. - A...

XnView - .RAS Image Processing Heap Overflow

XnView - .RAS Image Processing Heap Overflow Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timelin...

Heap spraying Adobe Illustrator

Due to the recent patched vulnerabilities in Adobe Illustrator CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026 it becomes interesting to analyze the exploitability facts of the .ai file format. Early versions of the AI file format are true EPS files with a restricted, compact synta...

Update protection against LEADTOOLS Raster Twain LtocxTwainu.dll Buffer Overflow

A buffer overflow vulnerability exists in LEADTOOLS Raster Twain ActiveX control. LEADTOOLS Imaging SDK provides tools for adding advanced imaging features to various applications. The vulnerability is due to a boundary error while parsing the "AppName" parameter of the affected ActiveX control...

LEADTOOLS Raster Twain LtocxTwainu.dll Buffer Overflow

LEADTOOLS Imaging SDK is a developers tool for adding advanced imaging features to various applications. TWAIN is standardized API that regulates communications between software applications and imaging devices. LEADTOOLS base Imaging SDK provides an ActiveX control that includes a Raster TWAIN...

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow (PoC)

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow PoC LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control a...

LEADTOOLS ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Remote Buffer Overflow PoC

Summary With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit device driver. High-level acquisition support is included for ease of use while low-level functionality is provided for flexibility and control in even the most demanding scanning...

LEADTOOLS ActiveX Raster Twain 16.5 Buffer Overflow

LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit...

Leadtools ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Buffer Overflow

Exploit for windows platform in category dos / poc ====================================================================== Leadtools ActiveX Raster Twain v16.5 LtocxTwainu.dll Buffer Overflow ====================================================================== LEADTOOLS ActiveX Raster Twain v16....

CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

CUPS PNG过滤器_cupsImageReadPNG()函数整数溢出漏洞

BUGTRAQ ID: 32518 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS PNG过滤器的cupsImageReadPNG函数中执行了以下计算： bufsize = img-xsize img-ysize 3; if bufsize / img-ysize 3 != img-xsize fprintfstderr, "DEBUG: PNG image dimensions %ux%u too...

MS Windows Metafile (.emf) Heap Overflow Exploit (MS04-032)

No description provided by source. / HOD-ms04032-emf-expl2.c: MS04-032 Microsoft Windows XP Metafile .emf Heap Overflow Exploit version 0.2 PUBLIC coded by .:: houseofdabus ::. at inbox dot ru ------------------------------------------------------------------- About WMF/EMF: Windows Metafile WMF...

CUPS gif_read_lzw()函数GIF文件处理缓冲区溢出漏洞

BUGTRAQ ID: 28544 CVECAN ID: CVE-2008-1373 Common Unix Printing System CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理畸形格式的GIF文件时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 CUPS打印系统所使用的GIF解析代码直接从GIF图形中读取了codesize值，且没有经过验证便用于初始化gifreadlzw中的表格数组，这可能导致静态溢出。...

GIMP multiple image loader integer overflows

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files...