UBUNTU-CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

Lattice Semiconductor ispVM System XCF File Handling Overflow

A stack buffer overflow vulnerability has been reported in ispVM System. The vulnerability is due to the improper validation of specially crafted XCF files. A remote attacker can exploit this issue by enticing the victim to accept and open a specially crafted XCF file. Successful exploitation wou...

IrfanView ImXCF.dll XCF File Handling Overflow

The version of the XCF plugin ImXCF.dll for IrfanView is earlier than 1.8.0.1314. As such, it reportedly is affected by a stack-based buffer overflow caused by insufficient validation when processing XCF files. An attacker could exploit this vulnerability to execute arbitrary code by tricking a...

CVE-2012-2614

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service application crash and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file...

Buffer overflow

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service application crash and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file...

CVE-2012-2614

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service application crash and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file...

Lattice Diamond Programmer buffer overflow

Code execution via .xcf files...

Lattice Diamond Programmer Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Lattice Diamond Programmer Buffer Overflow 1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL:...

Lattice Diamond Programmer Buffer Overflow

1. Advisory Information Title: Lattice Diamond Programmer Buffer Overflow Advisory ID: CORE-2012-0530 Advisory URL: http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow Date published: 2012-06-21 Date of last update: 2012-06-21 Vendors contacted: Lattice Semiconductor...

Lattice Semiconductor ispVM System XCF File Handling Overflow

This module exploits a vulnerability found in ispVM System 18.0.2. Due to the way ispVM handles .xcf files, it is possible to cause a buffer overflow with a specially crafted file, when a long value is supplied for the version attribute of the ispXCF tag. It results in arbitrary code execution...

ispVM System XCF File Handling Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

ispVM System XCF File Handling Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ispVM System XCF...

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17035

Check for the Version of gnome-xcf-thumbnailer OpenVAS Vulnerability Test Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17035 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17035

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17041

Check for the Version of gnome-xcf-thumbnailer OpenVAS Vulnerability Test Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17041 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17041

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17004

Check for the Version of gnome-xcf-thumbnailer OpenVAS Vulnerability Test Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17004 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for gnome-xcf-thumbnailer FEDORA-2010-17004

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : gnome-xcf-thumbnailer-1.0-4.fc12 (2010-17041)

This update fixes potential stack-based buffer overflows that can allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted image that causes a conversion to a location 'above or to the left of the canvas.' Note that Tenable Network Security has...