CVE-2016-7128

The CVE-2016-7128 entry affects PHP: the exif_process_IFD_in_TIFF function in ext/exif/exif.c mishandles a thumbnail offset that exceeds the TIFF file size, enabling remote attackers to read sensitive data from process memory via a crafted TIFF image. Affected versions: PHP before 5.6.25 and 7.x ...

PHP < 5.6.25, 7.x < 7.0.10 Multiple Vulnerabilities (Sep 2016) - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

Internet Bug Bounty: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)

I found some vulnerable code that leads to the memory leak in exifprocessIFDinTIFF. Let take look at code chunk : if !ImageInfo-Thumbnail.data && ImageInfo-Thumbnail.offset && ImageInfo-Thumbnail.size && ImageInfo-readthumbnail ImageInfo-Thumbnail.data = safeemallocImageInfo-Thumbnail.size, 1, 0;...

CVE-2014-7128

The Toyota OC Android app (com.tapatalk.toyotaownersclubcomforums) version 3.6.1 is affected by CVE-2014-7128 due to not verifying X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerab...

CVE-2013-7128

Affected software: Valve SteamOS Beta, Valve Bug Reporter package 2.10+bsos1. Vulnerability: Remember Credentials action stores credentials in a cleartext file (.valve-bugreporter.cfg). Impact: Local users can obtain sensitive information by reading the file, compromising confidentiality. Root ca...

CVE-2008-7128

The sslparseclientkeyexchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors...

CVE-2008-7128

The CVE-2008-7128 entry concerns the ssl_parse_client_key_exchange function in XySSL prior to 0.9, which does not protect against certain Bleichenbacher-style chosen-ciphertext attacks. The vulnerability allows remote attackers to recover keys via unspecified vectors. Documented impact is partial...

CVE-2008-5489

creationtimestamp| type| source ---|---|--- 2008-11-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7128 2013-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24894...

CVE-2006-7128

creationtimestamp| type| source ---|---|--- 2008-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5317...

CVE-2006-7128

CVE-2006-7128 describes a PHP remote file inclusion in JAF CMS 4.0 RC1, exploitable via the URL in the website parameter of forum.php, allowing remote code execution. The NVD CVSSv2 base score is 7.5 (HIGH) with network access, low complexity, no authentication, and partial impact on confidential...