Out-of-bounds

The exifdataloaddata function in exif-data.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory via crafted EXIF tags in an image...

CVE-2012-2836

The CVE-2012-2836 issue affects the libexif library (exif_data_load_data in libexif) prior to version 0.6.21. It allows remote attackers to trigger a denial of service (out-of-bounds read) or potentially leak sensitive process memory through crafted EXIF tags in an image. Impact is tied to applic...

php: integer overflow in exif_process_IFD_TAG() may lead to DoS or arbitrary memory disclosure

Integer overflow in the exifprocessIFDTAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offsetval value in an EXIF header in a JPEG file, a...

[SECURITY] Fedora 14 Update: gpscorrelate-1.6.1-3.fc14

Gpscorrelate adds coordinates to the exif data of jpeg pictures based on a gpx track file. The correlation is done by comparing the timestamp of the images with the timestamp of the gps coordinates...

[SECURITY] Fedora 14 Update: exiv2-0.21.1-1.fc14

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

PHP Multiple Vulnerabilities (Sep 2009)

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

PHP memory corruption

Memory corruption on EXIF data parsgin from JPEG file via exifreaddata...

Mandriva Update for libexif MDKSA-2007:118 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libexif MDKSA-2007:118 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Gentoo Security Advisory GLSA 200706-01 (libexif)

The remote host is missing updates announced in advisory GLSA 200706-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Integer overflow

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...

CVE-2007-6352

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...

DEBIAN-CVE-2007-6351

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service infinite recursion via an image file with crafted EXIF tags, possibly involving the exifloaderwrite function in exifloader.c...

DEBIAN-CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

libexif integer overflow

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...

CVE-2007-6356

exiftags before 1.01 allows attackers to cause a denial of service infinite loop via recursive IFD references in the EXIF data in a JPEG image...

CVE-2007-6356

exiftags before 1.01 allows attackers to cause a denial of service infinite loop via recursive IFD references in the EXIF data in a JPEG image...

CVE-2007-6356

exiftags before 1.01 allows attackers to cause a denial of service infinite loop via recursive IFD references in the EXIF data in a JPEG image...

libexif integer overflow

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...