1086 matches found
CVE-2006-5868
CVE-2006-5868 corresponds to multiple buffer overflows in ImageMagick (notably in SGI image decoding) that could allow arbitrary code execution when a user opens or processes a crafted SGI image. The CVE affects ImageMagick 6.0.x before 6.0.6.2 and 6.2.x before 6.2.4.5. Connected advisories (Debi...
CVE-2006-5868
Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image...
CVE-2006-5868
Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image...
Debian DSA-1213-1 : imagemagick - several vulnerabilities
Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation programs, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0082 Daniel Kobras discovered that...
ImageMagick -- SGI Image File heap overflow vulnerability
SecurityFocus reports about ImageMagick: ImageMagick is prone to a remote heap-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows attackers to execu...
GLSA-200609-14 : ImageMagick: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200609-14 ImageMagick: Multiple Vulnerabilities Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...
ImageMagick: Multiple Vulnerabilities
Background ImageMagick is a free software suite to manipulate, convert, and create many image formats. Description Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...
Apple QuickTime fails to properly handle SGI images
Overview Apple QuickTime fails to properly handle SGI images. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple QuickTime is multimedia software that allows users to view local and remote audio, vide...
CVE-2006-4385
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image...
CVE-2006-4385
CVE-2006-4385 refers to a buffer overflow in Apple QuickTime’s SGI image handling that could allow a user-assisted remote attacker to execute arbitrary code. Affected product: Apple QuickTime prior to 7.1.3 (Windows and Mac) with SGI format processing vulnerable. Impact per sources: potential rem...
CVE-2006-4385
Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image...
win32-codecs -- multiple vulnerabilities
The Apple Security Team reports that there are multiple vulnerabilities within QuickTime one of the plugins for win32-codecs. A remote attacker capable of creating a malicious SGI image, FlashPix, FLC movie, or a QuickTime movie can possibly lead to execution of arbitrary code or cause a Denial o...
Moderate: Red Hat Security Advisory: ImageMagick security update
Updated ImageMagick packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple...
security flaw
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via large 1 bytesperpixel, 2 columns, and 3 rows values, which trigger a heap-based buffer overflow...
USN-337-1: imagemagick vulnerability
Damian Put discovered a buffer overflow in imagemagick's SGI file format decoder. By tricking an user or automated system into processing a specially crafted SGI image, this could be exploited to execute arbitrary code with the user's privileges...
[Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow
Overflow.pl Security Advisory 7 ImageMagick ReadSGIImage Heap Overflow Vendor: ImageMagick http://www.imagemagick.org Affected version: 6.x up to and including 6.2.8 Vendor status: Fixed version released 6.2.9 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/imsgiheap.txt Date...
irix6local.txt
SGI IRIX 6.usr/sysadm/bin/runpriv draft resolution to be to complete at antecedence but to stoke seriously came ran ready-to-wear there is no need to explain in the interest of owners yonder protection them from geeks but whom need to make realize excellent. visit http://lezr.com/vb echo SGI IRIX...
CVE-2005-2925
runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin...
CVE-2005-2925
The CVE-2005-2925 issue concerns SGI IRIX’s runpriv, a setuid-root helper in /usr/sysadm/privbin. The vulnerability arises from a design flaw that permits local attackers to execute arbitrary commands by injecting shell metacharacters into a command line that is otherwise allowed, enabling root p...