92 matches found
UBUNTU-CVE-2019-17544
libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp via an isolated \ character...
exiv2: integer overflow in getData function in preview.cpp
Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...
The vulnerability of the getData function in the Exiv2 media metadata management library allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the getData function in the Exiv2 media metadata management library is related to buffer overflow. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using a specially created malicious file...
EulerOS 2.0 SP2 : exiv2 (EulerOS-SA-2018-1286)
According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service DoS. The attacker can trigger the attacker by sending a malicious LoaderTiff::getData in preview.cpp, causing an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...
Exiv2 Integer Overflow Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. An integer overflow vulnerability exists in the...
CVE-2018-12264
Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...
Integer overflow
Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...
CVE-2018-12264
Exiv2 0.26 contains an integer overflow in LoaderTiff::getData() (preview.cpp), leading to an out-of-bounds read in Exiv2::ValueType::setDataArea (value.hpp). Exploitation could cause crashes or memory corruption. The vulnerability is addressed in later Exiv2 revisions (e.g., upgrade to the 0.27....
CVE-2018-12264
Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
Buffer Overflow
libexiv2.so is vulnerable to buffer overflows. A malicious user can pass a jpg file to the LoaderTiff::getData function in preview.cpp to cause a buffer overflow that can crash the application or execute arbitrary code...
PYSEC-2018-130
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
Heap overflow
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
PYSEC-2018-130
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
DEBIAN-CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
Exiv2 Buffer Overflow Vulnerability
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in the getData of the...
UBUNTU-CVE-2018-11531
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...
Google Android 'address' parameter has unspecified vulnerability
Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...