CVE-2009-2188

Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image with crafted EXIF metadata...

CVE-2009-2687

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

Design/Logic Flaw

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

CVE-2009-2687

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

CVE-2009-2687

CVE-2009-2687 affects the PHP Exif module’s exif_read_data in PHP versions before 5.2.10. A remote attacker can cause a denial of service (crash) by supplying a malformed JPEG image with invalid offset fields. The issue is part of a broader PHP-related set of vulnerabilities referenced in multipl...

CVE-2009-2687

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)

This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Security Advisory MDVSA-2009:145 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:145. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

PHP memory corruption

Memory corruption on EXIF data parsgin from JPEG file via exifreaddata...

Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02

Check for the Version of GNOME EXIF tag parsing library for digital cameras OpenVAS Vulnerability Test Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...

Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02

Check for the Version of GNOME EXIF tag parsing library for digital cameras OpenVAS Vulnerability Test Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2009-1501

Cross-site scripting XSS vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image...

Cross site scripting

Cross-site scripting XSS vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image...

CVE-2009-1501

Cross-site scripting XSS vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image...

CVE-2009-1501

The CVE applies to Drupal's Exif module (versions 5.x-1.x before 5.x-1.2, and 6.x-1.x-dev before 13 Apr 2009). The root cause is an XSS flaw that allows remote attackers to inject arbitrary script/HTML via EXIF tags in an image, with network access and no user authentication required. Impact is p...

SA-CONTRIB-2009-022 - Exif - Cross Site Scripting

The Exif module enables users to display EXIF tags in images on the site. EXIF tags are not properly filtered for HTML input, allowing users with permission to upload images to inject arbitrary code into the site using a specially crafted image. Such a cross site scripting XSS attack may lead to ...

Mandrake Security Advisory MDVSA-2009:090 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:090. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Mandriva Update for exiv2 MDVSA-2008:006 (exiv2)

Check for the Version of exiv2 OpenVAS Vulnerability Test Mandriva Update for exiv2 MDVSA-2008:006 exiv2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for libexif MDKSA-2007:118 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libexif MDKSA-2007:118 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...