2306 matches found
security flaw
Integer overflow in the exifprocessIFDTAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count...
Mandrake Linux Security Advisory : php (MDKSA-2005:072)
A number of vulnerabilities are addressed in this PHP update : Stefano Di Paolo discovered integer overflows in PHP's pack, unpack, and shmopwrite functions which could allow a malicious script to break out of safe mode and execute arbitrary code with privileges of the PHP interpreter...
GLSA-200504-15 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200504-15 PHP: Multiple vulnerabilities An integer overflow and an unbound recursion were discovered in the processing of Image File Directory tags in PHP's EXIF module CAN-2005-1042, CAN-2005-1043. Furthermore, two infinite loops...
PHP: Multiple vulnerabilities
Background PHP is a general-purpose scripting language widely used to develop web-based applications. It can run inside a web server using the modphp module or the CGI version of PHP, or can run stand-alone in a CLI. Description An integer overflow and an unbound recursion were discovered in the...
[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...
DSA-709-1 libexif - buffer overflow
Bulletin has no description...
USN-112-1: PHP4 vulnerabilities
An integer overflow was discovered in the exifprocessIFDTAG function in PHP4's EXIF module. EXIF tags with a specially crafted "Image File Directory" IFD tag caused a buffer overflow which could have been exploited to execute arbitrary code with the privileges of the PHP4 server. CAN-2005-1042 Th...
CVE-2005-1043
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service memory consumption and crash via an EXIF header with a large IFD nesting level, which causes significant stack recursion...
CVE-2005-1043
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service memory consumption and crash via an EXIF header with a large IFD nesting level, which causes significant stack recursion...
PHP multiple vulnerabilities
Integer overflows on EXIF tags parsing...
CVE-2005-1043
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service memory consumption and crash via an EXIF header with a large IFD nesting level, which causes significant stack recursion...
PHP
New PHP packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. More details about the issues may be found in the PHP ChangeLogs on the PHP web site: http://php.net Here are the details from the Slackware 10.1 ChangeLog:...
security flaw
Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...
GLSA-200503-17 : libexif: Buffer overflow vulnerability
The remote host is affected by the vulnerability described in GLSA-200503-17 libexif: Buffer overflow vulnerability libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause...
libexif: Buffer overflow vulnerability
Background libexif is a library for parsing, editing and saving EXIF data. Description libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause applications linked to libexif to cras...
[USN-91-1] EXIF library vulnerability
=========================================================== Ubuntu Security Notice USN-91-1 March 07, 2005 libexif vulnerabilities https://bugzilla.ubuntulinux.org/7152 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10...
Libexif buffer overflow
Buffer overflow during EXIF tags parsing...
CVE-2005-0664
Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...
CVE-2005-0664
CVE-2005-0664 concerns a buffer overflow in libexif 0.6.9 due to improper validation of EXIF tag structures, enabling a crafted JPEG image to cause an application crash and potentially allow remote code execution. Publicly documented impact is a crash and possible arbitrary code execution, with e...
CVE-2005-0664
Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...