exempi security update

CentOS Errata and Security Advisory CESA-2019:2048 An update for exempi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Scientific Linux Security Update : exempi on SL7.x x86_64 (20190806)

Security Fixes : - exempi: Infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp CVE-2017-18233 - exempi: Use after free via a PDF file containing JPEG data CVE-2017-18234 - exempi: Infinite loop in ASFSupport::ReadHeaderObject function in...

exempi security update

2.2.0-9 - Fix CVE-2017-18233 resolves: 1574865 - Fix CVE-2017-18234 resolves: 1656011 - Fix CVE-2017-18236 resolves: 1574905 - Fix CVE-2017-18238 resolves: 1572270 - Fix CVE-2018-7730 resolves: 1572631...

RHEL 7 : exempi (RHSA-2019:2048)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2048 advisory. Exempi provides a library for easy parsing of XMP metadata. It is a port of Adobe XMP SDK to work on UNIX and to be build with GNU automake...

Fedora 28 : exempi (2018-1c9f6768cf)

Version 2.4.5 fixes the following security issues : - CVE-2018-7728 - CVE-2018-7729 - CVE-2018-7730 - CVE-2018-7731 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

SUSE SLED12 / SLES12 Security Update : exempi (SUSE-SU-2018:3389-1)

This update for exempi fixes the following security issues : CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed remote attackers to cause a denial of service infinite loop via crafted XMP data in a .avi file bsc1085584. CVE-2017-18238: The TradQTManager::ParseCachedBoxes...

SUSE SLES11 Security Update : exempi (SUSE-SU-2018:2067-1)

This update for exempi fixes the following issues: Security issue fixed : - CVE-2018-7730: Fix heap-based buffer overflow in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp bsc1085295. - CVE-2017-18234: Fix use-after-free issue that allows remote attackers to cause a denial of service via a .pdf...

Fedora Update for exempi FEDORA-2018-c442aad4dc

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : exempi (2018-c442aad4dc)

Version 2.4.5 fixes the following security issues : - CVE-2018-7728 - CVE-2018-7729 - CVE-2018-7730 - CVE-2018-7731 Version 2.4.4 fixes the following security issues : - CVE-2017-18233 - CVE-2017-18236 Version 2.4.3 fixes the following security issues : - CVE-2017-18234 - CVE-2017-18235 -...

Debian: Security Advisory (DLA-1310-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1310-1] exempi security update

Package : exempi Version : 2.2.0-1+deb7u1 CVE ID : CVE-2017-18233 CVE-2017-18234 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7730 Various issues were discovered in exempi, a library to parse XMP metadata that may cause a denial-of-service or may have other unspecified impact via crafted...

openSUSE Security Update : exempi (openSUSE-2018-282)

This update for exempi fixes the following issues : - CVE-2018-7728: Specially crafted TIFF images could have been used to cause a denial of service via a heap-based buffer overflow boo1085297 - CVE-2018-7730: Specially crafted Excel files could have been used cause a denial of service via a...

CVE-2018-7730

CVE-2018-7730 affects Exempi up to version 2.4.4. A specific case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp, causing a heap-based buffer over-read in PSD_MetaHandler::CacheFileData(). Connected documentation confirms the affected file and function a...

CVE-2018-7730

An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp, leading to a heap-based buffer over-read in the PSDMetaHandler::CacheFileData function...

CVE-2017-7730

The CVE-2017-7730 issue affects iSmartAlarm cube devices and describes a Denial of Service caused by a SYN flood to TCP port 12345, which can freeze the cube and render it unresponsive. Public details indicate an internal LAN attack vector (no user interaction required) with a low attack complexi...

CVE-2014-7730

...

CVE-2014-7730

CVE-2014-7730 is rejected and not associated with any vulnerability; it is not an active entry.

CVE-2016-7730

CVE-2016-7730 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.

CVE-2015-7730

CVE-2015-7730 affects SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3. A crafted GIOP packet can trigger an out-of-bounds read and listener crash, enabling remote denial of service. The entry documents this as SAP Security Note 2001108. Exploita...