3217 matches found
CVE-2018-11037
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file...
CVE-2018-11037
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file...
CVE-2018-11037
Exiv2 vulnerability CVE-2018-11037 affects Exiv2 up to version 0.26, where Exiv2::PngImage::printStructure in pngimage.cpp could leak information via a crafted PNG file. Affected advisories/tracking show remediation by upgrading to Exiv2 0.27.2 (e.g., via RHSA/RHSA-2020:1577, ELSA/ALSA notes). In...
PT-2018-19186
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue allows remote attackers to cause an information leak via a crafted file, specifically through the Exiv2::PngImage::printStructure function in pngimage.cpp. Recommendations For Exiv2 version 0.26, at the...
Exiv2 Information Disclosure Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...
CVE-2018-11037: Exposure of Sensitive Information to an Unauthorized Actor
In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file...
Exiv2 'readMetadata' Function Denial of Service Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the 'readMetadata' functio...
PT-2018-10259
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue allows remote attackers to cause an information leak via a crafted file. This is due to a problem in the Exiv2::PngImage::printStructure function in pngimage.cpp. Recommendations For Exiv2 version 0.26,...
CVE-2018-10780
Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read...
CVE-2018-10998
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...
CVE-2018-10998
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...
PYSEC-2018-128
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
Code injection
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...
PYSEC-2018-128
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
Heap overflow
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
DEBIAN-CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
CVE-2018-10999
An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...
DEBIAN-CVE-2018-10998
An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...