PNG Image Metadata Found Leveraging iFrame Injections

Researchers have discovered a relatively new way to distribute malware that relies on reading JavaScript code stored in an obfuscated PNG file’s metadata to trigger iFrame injections. The technique makes it highly unlikely a virus scanner would catch it because the injection method is so deeply...

JPEGsnoop 1.5.2 - WriteAV Crash (PoC)

!/usr/bin/perl JPEGsnoop 1.5.2 Vendor URI: http://sourceforge.net/projects/jpegsnoop/ Vendor Description: JPEGsnoop is a detailed JPEG image decoder and analysis tool. It reports all image metadata and can even help identify if an image has been edited. Debug info: Microsoft R Windows Debugger...

libexif: "exif_entry_get_value()" heap-based out-of-bounds array read

The exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service out-of-bounds read or possibly obtain sensitive information from process memory via crafted EXIF tags in an image...

ALPINE-CVE-2012-2840

Off-by-one error in the exifconvertutf16toutf8 function in exif-entry.c in the EXIF Tag Parsing Library aka libexif before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image...

ALPINE-CVE-2012-2841

Integer underflow in the exifentrygetvalue function in exif-entry.c in the EXIF Tag Parsing Library aka libexif 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer...

ImageMagick: Out-of-bounds buffer read by copying image bytes for TIFF images with crafted TIFF EXIF IFD value

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

php: integer overflow in exif_process_IFD_TAG() may lead to DoS or arbitrary memory disclosure

Integer overflow in the exifprocessIFDTAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offsetval value in an EXIF header in a JPEG file, a...

Fedora Update for exiv2 FEDORA-2011-5200

Check for the Version of exiv2 OpenVAS Vulnerability Test Fedora Update for exiv2 FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

[SECURITY] Fedora 14 Update: pyexiv2-0.3.0-1.fc14

pyexiv2 is a python binding to exiv2, the C++ library for manipulation of EXIF and IPTC image metadata. It is a python module that allows your python scripts to read and write metadata EXIF, IPTC, thumbnail embedded in image files JPEG, TIFF,...

PHP Exif Extension 'exif_read_data()' Function Remote DoS

No description provided by source. ===================================================================== PHP Exif 64bit Casting Vulnerability ===================================================================== Affected Software : PHP = 5.3.5 Exif extension for 64bit platforms Severity : Low...

RHEL 6 : java-1.6.0-openjdk (RHSA-2010:0865)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0865 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. defaultReadObject of the...

RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

PT-2009-5082 · Php +2 · Php +2

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.10 Description: The issue is related to the exif read data function in the Exif module, which allows remote attackers to cause a denial of service crash by providing a malformed JPEG image with invalid offset fields...

Fedora Update for exiv2 FEDORA-2007-4551

Check for the Version of exiv2 OpenVAS Vulnerability Test Fedora Update for exiv2 FEDORA-2007-4551 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for exiv2 FEDORA-2007-4591

Check for the Version of exiv2 OpenVAS Vulnerability Test Fedora Update for exiv2 FEDORA-2007-4591 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

PYSEC-2008-11

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

[SECURITY] Fedora 8 Update: exiv2-0.15-5.fc8

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

[SECURITY] Fedora 7 Update: exiv2-0.15-5.fc7

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

DEBIAN-CVE-2006-1165

Cross-site scripting XSS vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to "handling EXIF data."...

DEBIAN-CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...