< Back to JetLib.com

jetlib.sec » Tags » bmp-image

« Expand/Collapse

10 items tagged "bmp image"

Related tags: image [+], code execution [+], bmp [+], adobe [+], zero [+], day [+], adobe image [+], tiff image [+], tiff [+], integer overflow vulnerability [+], gimp [+], gdip [+], function [+], buffer overflows [+], vulnerability [+], uninitialized [+], safer use [+], memory information [+], information disclosure vulnerability [+], image file [+], code [+], buffer overflow vulnerability [+], apple safari [+], apple quicktime [+], acdsee [+]

February 21, 2012
0:00
Vuln: ACDSee BMP Image File Handling Remote Heap Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

ACDSee BMP Image File Handling Remote Heap Buffer Overflow Vulnerability
Tags: acdsee image bmp buffer-overflow-vulnerability bmp-image image-file

January 21, 2012
10:59
Adobe Reader BMP Image RLE Decoding Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability adobe apple-quicktime bmp-image code-execution safer-use

October 26, 2011
10:55
Zero Day Initiative Advisory 11-296
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-296 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Adobe Image parsing library. When Adobe Reader tries to parse an malformed .BMP image containing Run Length Encoded data it fails to perform sufficient boundary checks on the data. The effect can be a heap buffer overflow resulting in remote code execution under the context of the current user.
Tags: day zero adobe bmp-image adobe-image code-execution

10:55
Zero Day Initiative Advisory 11-296
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-296 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Adobe Image parsing library. When Adobe Reader tries to parse an malformed .BMP image containing Run Length Encoded data it fails to perform sufficient boundary checks on the data. The effect can be a heap buffer overflow resulting in remote code execution under the context of the current user.
Tags: day zero adobe bmp-image adobe-image code-execution

10:55
Zero Day Initiative Advisory 11-296
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-296 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Adobe Image parsing library. When Adobe Reader tries to parse an malformed .BMP image containing Run Length Encoded data it fails to perform sufficient boundary checks on the data. The effect can be a heap buffer overflow resulting in remote code execution under the context of the current user.
Tags: day zero adobe bmp-image adobe-image code-execution

June 02, 2011
0:00
Vuln: GIMP BMP Image Parsing Integer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

GIMP BMP Image Parsing Integer Overflow Vulnerability
Tags: image bmp gimp integer-overflow-vulnerability bmp-image
May 31, 2011
0:00
Vuln: GIMP BMP Image Parsing Integer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

GIMP BMP Image Parsing Integer Overflow Vulnerability
Tags: image bmp gimp integer-overflow-vulnerability bmp-image

August 31, 2010
12:01
MDVSA-2010-166.txt
» ‎ Packet Storm Security Recent Files

Mandriva Linux Security Advisory 2010-166 - Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via a crafted TIFF file, related to the gdip_load_tiff_image function in tiffcodec.c; a crafted JPEG file, related to the gdip_load_jpeg_image_internal function in jpegcodec.c; or a crafted BMP file, related to the gdip_read_bmp_image function in bmpcodec.c, leading to heap-based buffer overflows. The updated packages have been patched to correct this issue.
Tags: function image gdip tiff bmp-image buffer-overflows tiff-image

12:00
MDVSA-2010-166.txt
» ‎ Packet Storm Security Advisories

Mandriva Linux Security Advisory 2010-166 - Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via a crafted TIFF file, related to the gdip_load_tiff_image function in tiffcodec.c; a crafted JPEG file, related to the gdip_load_jpeg_image_internal function in jpegcodec.c; or a crafted BMP file, related to the gdip_read_bmp_image function in bmpcodec.c, leading to heap-based buffer overflows. The updated packages have been patched to correct this issue.
Tags: function image gdip tiff bmp-image buffer-overflows tiff-image

April 03, 2010
0:00
Vuln: Apple Safari BMP Image Uninitialized Memory Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

Apple Safari BMP Image Uninitialized Memory Information Disclosure Vulnerability
Tags: image uninitialized bmp apple-safari information-disclosure-vulnerability bmp-image memory-information