imager vulnerabilities and exploits

(subscribe to this query)

Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 up to and including 0.56 allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP file...

Tony Cook Imager 0.52 Tony Cook Imager 0.48 Tony Cook Imager 0.53 Tony Cook Imager 0.45 Tony Cook Imager 0.49 Tony Cook Imager 0.54 Tony Cook Imager 0.45 2 Tony Cook Imager 0.46 Tony Cook Imager 0.56 Tony Cook Imager 0.44 1 Tony Cook Imager 0.44 Tony Cook Imager 0.51 Tony Cook Imager 0.47 Tony Cook Imager 0.55 Tony Cook Imager 0.50

Imager (libimager-perl) prior to 0.50 allows user-assisted malicious users to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference.

Tony Cook Imager 0.48 Tony Cook Imager 0.45 Tony Cook Imager 0.49 Tony Cook Imager 0.45 2 Tony Cook Imager 0.42 Tony Cook Imager 0.44 1 Tony Cook Imager 0.47 Tony Cook Imager 0.41 Tony Cook Imager 0.43

1 EDB exploit

The Imager package prior to 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.

Wyse Simple Imager (WSI) is a component of Wyse Device Manager (WDM, formerly known as Wyse Rapport). WSI includes TFTPD32 as the TFTP service to load firmware images on client devices. The versions of TFTPD32 contains several known vulnerabilities. The following list of TFTPD32 ...

tftp32 TFTP server 2.21 and previous versions allows remote malicious users to cause a denial of service via a GET request with a DOS device name such as com1 or aux.

Tftp Tftp Server 2.21

tftpd32 2.50 and 2.50.2 allows remote malicious users to read or write arbitrary files via a full pathname in GET and PUT requests.

Tftpd32 Tftpd32 2.50 Tftpd32 Tftpd32 2.50.2

1 EDB exploit

Format string vulnerability in Tftpd32 2.81 allows remote malicious users to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.

Philippe Jounin Tftpd32 2.81

1 EDB exploit

Buffer overflow in tftpd of TFTP32 2.21 and previous versions allows remote malicious users to execute arbitrary code via a long filename argument.

Tftpd32 Tftpd32

2 EDB exploits

tftpd in Philippe Jounin Tftpd32 2.74 and previous versions, as used in Wyse Simple Imager (WSI) and other products, allows remote malicious users to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability th...

Philippe Jounin Tftpd32 2.5 Philippe Jounin Tftpd32 2.70 Philippe Jounin Tftpd32 2.53 Philippe Jounin Tftpd32 2.54 Philippe Jounin Tftpd32 2.60 Philippe Jounin Tftpd32 2.72 Philippe Jounin Tftpd32 2.73 Philippe Jounin Tftpd32 2.51 Philippe Jounin Tftpd32 Philippe Jounin Tftpd32 2.62 Philippe Jounin Tftpd32 2.52

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook