2074 matches found
DEBIAN-CVE-2018-6612
An integer underflow bug in the processEXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact...
[SECURITY] Fedora 26 Update: libexif-0.6.21-14.fc26
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...
[SECURITY] Fedora 27 Update: libexif-0.6.21-14.fc27
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...
CVE-2017-16384
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer over-read in the exif processing module for a PNG file duri...
Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16384)
A buffer over-read vulnerability exists in the exif processing module for a PNG file during XPS conversion. The vulnerability is due to an invalid input leads to an incorrect memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...
Design/Logic Flaw
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
DEBIAN-CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
UBUNTU-CVE-2014-9092
libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...
OpenExif Denial of Service Vulnerability
OpenExif is an object-oriented library for accessing JPEG image files in Exif format. A denial of service vulnerability exists in ExifImageFile::readDQT in ExifImageFileRead.cpp in OpenExif, which could allow a remote attacker to cause a denial of service stack buffer over-reading and application...
libexif Denial of Service Vulnerability
libexif is a library of functions written in C to read and write EXIF meta-information from graphics files. A security vulnerability in the 'exifdatasavedataentry' function in the libexif/exif-data.c file in libexif version 0.6.21 and earlier stems from the program failing to correctly calculate...
UBUNTU-CVE-2017-7544
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure...
DEBIAN-CVE-2017-7544
libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure...
Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-31368)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Media framework libjhead is a library developed in C to manipulate the EXIF information of image files. A remote code execution vulnerability exists in Media...