CVE-2010-1526: Buffer Overflow
Multiple integer overflows in libgdiplus 2.6.7, as used in Mono, allow attackers to execute arbitrary code via (1) a crafted TIFF file, related to the gdiploadtiffimage function in tiffcodec.c; (2) a crafted JPEG file, related to the gdiploadjpegimageinternal function in jpegcodec.c; or (3) a crafted BMP file, related to the gdipreadbmpimage function in bmpcodec.c, leading to heap-based buffer overflows.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1526?
CVE-2010-1526 is considered critical due to its potential for remote code execution.
How do I fix CVE-2010-1526?
To fix CVE-2010-1526, update libgdiplus to version 2.6.8 or later.
What types of files are exploited in CVE-2010-1526?
CVE-2010-1526 can be exploited through crafted TIFF and JPEG files.
Which version of libgdiplus is affected by CVE-2010-1526?
CVE-2010-1526 affects libgdiplus version 2.6.7.
What methods can attackers use in CVE-2010-1526?
Attackers can use crafted image files to exploit multiple integer overflow vulnerabilities in libgdiplus.