2072 matches found
CVE-2009-2687
CVE-2009-2687 affects the PHP Exif module’s exif_read_data in PHP versions before 5.2.10. A remote attacker can cause a denial of service (crash) by supplying a malformed JPEG image with invalid offset fields. The issue is part of a broader PHP-related set of vulnerabilities referenced in multipl...
CVE-2009-2687
The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...
openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)
This update of php5 fixes : - possible stack-based buffer overflow CVE-2008-2050 - incomplete escapeshellcmd CVE-2008-2051 - printf integer overflow CVE-2008-1384 - insecure GENERATESEED macro CVE-2008-2107 - timezone update for DST in Pakistan %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Mandrake Security Advisory MDVSA-2009:145 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:145. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
PHP memory corruption
Memory corruption on EXIF data parsgin from JPEG file via exifreaddata...
Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02
Check for the Version of GNOME EXIF tag parsing library for digital cameras OpenVAS Vulnerability Test Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...
Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02
Check for the Version of GNOME EXIF tag parsing library for digital cameras OpenVAS Vulnerability Test Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...
Cross site scripting
Cross-site scripting XSS vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image...
CVE-2009-1501
Cross-site scripting XSS vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image...
CVE-2009-1501
The CVE applies to Drupal's Exif module (versions 5.x-1.x before 5.x-1.2, and 6.x-1.x-dev before 13 Apr 2009). The root cause is an XSS flaw that allows remote attackers to inject arbitrary script/HTML via EXIF tags in an image, with network access and no user authentication required. Impact is p...
CVE-2009-1501
Cross-site scripting XSS vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image...
SA-CONTRIB-2009-022 - Exif - Cross Site Scripting
The Exif module enables users to display EXIF tags in images on the site. EXIF tags are not properly filtered for HTML input, allowing users with permission to upload images to inject arbitrary code into the site using a specially crafted image. Such a cross site scripting XSS attack may lead to ...
Mandrake Security Advisory MDVSA-2009:090 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:090. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Mandriva Update for exiv2 MDVSA-2008:006 (exiv2)
Check for the Version of exiv2 OpenVAS Vulnerability Test Mandriva Update for exiv2 MDVSA-2008:006 exiv2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mandriva Update for libexif MDKSA-2007:118 (libexif)
Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for libexif MDKSA-2007:118 (libexif)
Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Ubuntu: Security Advisory (USN-654-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-478-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-471-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
