[SECURITY] Fedora 9 Update: jhead-2.84-1.fc9

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

USN-654-1: libexif vulnerabilities

Meder Kydyraliev discovered that libexif did not correctly handle certain EXIF headers. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could cause the application linked against libexif to crash, leading to a denial of service, or possibly...

Gentoo Security Advisory GLSA 200706-01 (libexif)

The remote host is missing updates announced in advisory GLSA 200706-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

JPEG EXIF cross site attacks-vulnerability warning-the black bar safety net

Article author: dark night costumes Leave the hacking community after a long time LOR...life is so real Ahha hamissed previously. This time play the camera. Digital,SLR are in play. At the same time I'm ready to do a thematic photography figure Bo. In the study very much Station popular Upload a...

Motorola RAZR JPEG处理缓冲区溢出漏洞

Motorola RAZR是一款流行的手机。 Motorola RAZR包含的JPEG缩略图组件处理JPEG图像存在边界条件错误，远程攻击者可以利用漏洞使设备停止响应，造成拒绝服务攻击。 EXIF解析器的JPEG缩略图组件存在缺陷，一个破坏的JPEG图像，通过MMS发送到目标机器，可导致内存破坏而使设备停止响应，可能导致任意代码执行。 Motorola RAZR 厂商解决方案 供应商建议升级到最新固件版本： http://direct.motorola.com/hellomoto/NSS/updatemysoftware.asp...

Stack overflow

Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption...

CVE-2008-2548

Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assisted remote attackers to execute arbitrary code via an MMS transmission of a malformed JPEG image, which triggers memory corruption...

CVE-2008-2548

CVE-2008-2548 affects Motorola RAZR firmware where the JPEG thumbprint component of the EXIF parser is vulnerable to a stack-based buffer overflow. A malformed JPEG image sent via MMS can trigger memory corruption, allowing remote attackers to execute arbitrary code; exploitation requires user in...

Motorola RAZR JPG处理栈溢出漏洞

RAZR是摩托罗拉推出的一款超薄手机。 RAZR手机的EXIF解析器中的JPEG缩略图组件中存在栈溢出漏洞，如果用户通过彩信接收到了恶意的JPEG图形文件的话，就可以触发这个溢出，导致执行任意指令。 Motorola RAZR Motorola -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://direct.motorola.com/hellomoto/NSS/updatemysoftware.asp...

Motorola RAZR JPG Processing Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable Motorola RAZR firmware based cell phones. User interaction is required to exploit this vulnerability in that the target must accept a malicious image sent via MMS. The specific flaw exists in the JPEG thumbprint...

Debian Security Advisory DSA 1533-1 (exiftags)

The remote host is missing an update to exiftags announced via advisory DSA 1533-1. OpenVAS Vulnerability Test $Id: deb15331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1533-1 exiftags Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1533-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1533-2 exiftags

Bulletin has no description...

Debian DSA-1533-2 : exiftags - insufficient input sanitizing

Christian Schmid and Meder Kydyraliev Google Security discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems : - CVE-2007-6354 Inadequate EXIF property...

[SECURITY] [DSA 1533-1] New exiftags packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1533-1 [email protected] http://www.debian.org/security/ Devin Carraway March 27, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1487-1 libexif - several vulnerabilities

Bulletin has no description...

DSA-1474-1 exiv2 - arbitrary code execution

Bulletin has no description...

Debian Security Advisory DSA 593-1 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory DSA 593-1. OpenVAS Vulnerability Test $Id: deb5931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 593-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 593-1 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory DSA 593-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...