USN-91-1: EXIF library vulnerability

Sylvain Defresne discovered that the EXIF library did not properly validate the structure of the EXIF tags. By tricking a user to load an image with a malicious EXIF tag, an attacker could exploit this to crash the process using the library, or even execute arbitrary code with the privileges of t...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406

Technical details about CVE-2005-0406 are not publicly provided in the connected documents (no explicit affected products, versions, vectors, or fixes). Monitor for updates.

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406: Improper Removal of Sensitive Information Before Storage or Transfer

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

CVE-2004-0981

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file...

DEBIAN-CVE-2004-0981

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file...

Fedora Core 3 : php-4.3.10-3.2 (2004-568)

Tue Dec 21 2004 Joe Orton 4.3.10-3.2 - fix umask patch 143286 - Wed Dec 15 2004 Joe Orton 4.3.10-3.1 - update to 4.3.10, including security fixes 141135 : - unserializer integer overflows, CVE-2004-1019 - exif image parsing overflow, CVE-2004-1065 Note that Tenable Network Security has extracted...

Fedora Core 2 : php-4.3.10-2.4 (2004-567)

This update includes the latest release of PHP 4.3, including fixes for security issues in the unserializer CVE-2004-1019, exif image parsing CVE-2004-1065, and form upload parsing CVE-2004-0958 and CVE-2004-0959. Note that Tenable Network Security has extracted the preceding description block...

security flaw

Buffer overflow in the exifreaddata function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file...

security flaw

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file...

Mandrake Linux Security Advisory : ImageMagick (MDKSA-2004:143)

A vulnerability was discovered in ImageMagick where, due to a boundary error within the EXIF parsing routine, a specially crafted graphic image could potentially lead to the execution of arbitrary code. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable...

FreeBSD : ImageMagick -- EXIF parser buffer overflow (3)

The following package needs to be updated: ImageMagick %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgeeb1c12833e711d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVE-2004-0981

CVE-2004-0981 affects ImageMagick and concerns a buffer overflow in the TIFF/EXIF parsing routine that can lead to remote code execution via a crafted image file. The initial record states the vulnerability exists in ImageMagick before 6.1.0, with a network-based attack vector and critical impact...

CVE-2004-0981

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file...

CVE-2004-0981: Undefined Security Weakness

Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file...

DSA-593-1 imagemagick - buffer overflow

Bulletin has no description...

GLSA-200411-11 : ImageMagick: EXIF buffer overflow

The remote host is affected by the vulnerability described in GLSA-200411-11 ImageMagick: EXIF buffer overflow ImageMagick fails to do proper bounds checking when handling image files with EXIF information. Impact : An attacker could use an image file with specially crafted EXIF information to...