95 matches found
CVE-2007-4168
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4168. Reason: This candidate is a duplicate of CVE-2006-4168. It was inadvertently used in a vendor advisory when the "2006" year was intended. Notes: All CVE users should reference CVE-2006-4168 instead of this candidate. Al...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4168. Reason: This candidate is a duplicate of CVE-2006-4168. It was inadvertently used in a vendor advisory when the "2006" year was intended. Notes: All CVE users should reference CVE-2006-4168 instead of this candidate. Al...
CVE-2007-4168
CVE-2007-4168 is rejected/not used; refer to CVE-2006-4168.
[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-1310-1 [email protected] http://www.debian.org/security/ Steve Kemp June 16, 2007 - ------------------------------------------------------------------------ Package : libexif 0.6.13-5etch1...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
DEBIAN-CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
CVE-2006-4168
CVE-2006-4168 affects libexif prior to 0.6.16, where an integer overflow in exif_data_load_data_entry can trigger a heap-based overflow when processing images with many EXIF components. This can lead to denial of service (crash) and, in at least some advisories, arbitrary code execution. Multiple...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
[slackware-security] libexif
New libexif packages are available for Slackware 10.2, 11.0, and -current to fix a crash and potential security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-4168 Here are the details from the Slackware...
Moderate: libexif security update: integer overflow
Add patch for CVE-2007-4168. Fix bug 243893 - Fix bug 240055...
iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability
Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability iDefense Security Advisory 06.13.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 13, 2007 I. BACKGROUND Exchangeable image file format Exif is an industry standard image tagging technology used by many digital...
CVE-2005-4168
CVE-2005-4168 affects eFiction versions 1.0, 1.1, and 2.0. The vulnerabilities are SQL injections in two inputs: (1) the let parameter in the titles.php viewlist action, and (2) the username. The issue allows remote attackers to execute arbitrary SQL commands. The available documents do not provi...
