FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-1942

This CVE name corresponds to:

Entered Topic
2007-04-30 p5-Imager -- possibly exploitable buffer overflow

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2007-1942
Phase Assigned(20070410)

Description

Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp.

References

Source Reference
BUGTRAQ 20070404 Several Windows image viewers vulnerabilities
MISC http://ifsec.blogspot.com/2007/04/several-windows-image-viewers.html
BID 23312
OSVDB 34664
SECUNIA 24784
SREASON 2558