iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability

iDefense Security Advisory 12.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 11, 2007 I. BACKGROUND Microsoft DirectShow, part of Microsoft DirectX, is used for the capture and playback of multimedia streams on Microsoft Windows systems. Synchronized Accessible Media Interchange...

Buffer overflow

Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer explorer.exe 6.00.2900.2180, Don Ho Notepad++, unspecified Adobe Macromedia applications, and other programs, allow user-assisted remote attackers to cause a denial of service application...

Integer overflow

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service CPU consumption via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png...

CVE-2007-5133

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service CPU consumption via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png...

Possible Windows Explorer bad PNG file preview integer overflow handling

Hi folks, Can anyone confirm that the attached PNG file is causing Explorer to eat 100 CPU, and if this is a known issue ? Currently tested with an up-to-date Windows XP and Windows Vista The probable cause is an integer overflow in the PNG chunk size handling, which is 32-bit large, and which ca...

Microsoft Windows Explorer PNG DoS

Infinite loop on invalid PNG file parsing...

Windows explorer JPG PoC denial of service exploit

No description provided by source. !/usr/bin/perl Bug found and ExpLoitEd by CrazyAngel Greets: st0rke, Elite, P0uyas3rv3r, Aria ThnX ALL Shabgard.Org Members Specially Moderators and Clans print "\nJPG PoC denial of service exploit by CrazyAngel "; print "\n\ngenerating something.jpg..."; openJP...

CVE-2007-4227

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demonstrated by something.jpg. NOTE: this issue might be related to CVE-2007-3958...

CVE-2007-4227

Microsoft Windows Explorer (explorer.exe) is affected by CVE-2007-4227, a user-assisted DoS vulnerability triggered by processing a crafted image file (e.g., something.jpg). The connected documents also reference CVE-2007-3958 (GIF file) as related, indicating a similar DoS vector in explorer.exe...

CVE-2007-4227

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demonstrated by something.jpg. NOTE: this issue might be related to CVE-2007-3958...

Microsoft Windows Explorer - .png Image Local Denial of Service

Microsoft Windows Explorer - .png Image Local Denial of Service source: https://www.securityfocus.com/bid/25816/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability because it fails to handle malformed PNG image files. Attackers can exploit this issue to cause Windows...

CVE-2007-3958

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demonstrated by Art.gif...

MS Windows Explorer.exe Gif Image Denial of Service Exploit

No description provided by source. !/usr/bin/perl Bug Found By ::DeltahackingTEAM Coded By Reza.Yavari Dr.Pantagon Web Site::Www.Deltahacking.net And Www.DeltaSecurity.ir And Www.PersianWhois.com Free Upload :: Www.Persianupload.com And Www.Persianupload.net Email: Dr.Pantagon ADeltasecurity.ir W...

Microsoft Windows XP - GDI+ .ICO File Remote Denial of Service

Microsoft Windows XP - GDI+ .ICO File Remote Denial of Service source: https://www.securityfocus.com/bid/24346/info Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to properly handle maliciously crafted ICO files. An attacker may exploit this issue by...

Microsoft Windows XP - GDI+ '.ICO' File Remote Denial of Service

source: https://www.securityfocus.com/bid/24346/info Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to properly handle maliciously crafted ICO files. An attacker may exploit this issue by enticing victims into opening a malicious file. Successful exploits...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

Integer overflow

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2007-1946

Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp...

CVE-2007-1946

CVE-2007-1946 is described as an integer overflow in Windows Explorer on Windows XP SP1 that could allow denial of service and possibly arbitrary code execution via a crafted BMP image (w4intof.bmp). The connected OpenVAS and FreeBSD VuXML entries reference BMP/image parsing-related overflow issu...

Microsoft Windows Explorer - .ANI File Denial of Service

Microsoft Windows Explorer - .ANI File Denial of Service / MS Windows Explorer Unspecified .ANI File DoS Another .Ani bug that freezes Explorer if you open a folder that contains a crafted file. Tested against Win XP SP2 FR. Have Fun! Coded by Marsu / include "stdio.h" include "stdlib.h" unsigned...