LibEXIF exif_data_load_data_entry函数远程整数溢出漏洞

libexif是用C编写的函数库，用于从图形文件中读写EXIF元信息。 libexif在处理图形文件中的畸形EXIF信息时存在整数溢出漏洞，远程攻击者可能利用此漏洞控制客户机。 如果用户受骗打开了恶意的图形文件的话，就可能触发这个溢出，导致使用该函数库的应用程序崩溃或执行任意指令。漏洞代码位于libexif/exif-data.c文件186行的exifdataloaddataentry函数： / Sanity check / if size doff + s return; entry-data = exifdataalloc data, s; if entry-data...

LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow

LibEXIF 0.6.x - ExifDataLoadDataEntry Remote Integer Overflow source: https://www.securityfocus.com/bid/23927/info The libexif library is prone to an integer-overflow vulnerability because the software fails to properly ensure that integer math operations do not result in overflows. Successful...

LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow

source: https://www.securityfocus.com/bid/23927/info The libexif library is prone to an integer-overflow vulnerability because the software fails to properly ensure that integer math operations do not result in overflows. Successful exploits of this vulnerability allow remote attackers to execute...

Solaris 9 (x86) : 121093-01

GNOME 2.6.0x86: libexif Patch. Date this patch was last updated by Sun : Nov/15/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Ubuntu 4.10 : libexif vulnerabilities (USN-91-1)

Sylvain Defresne discovered that the EXIF library did not properly validate the structure of the EXIF tags. By tricking a user to load an image with a malicious EXIF tag, an attacker could exploit this to crash the process using the library, or even execute arbitrary code with the privileges of t...

FreeBSD : libexif -- buffer overflow vulnerability (624fe633-9006-11d9-a22c-0001020eed82)

Sylvain Defresne reports that libexif is vulnerable to a buffer overflow vulnerability due to insufficient input checking. This could lead crash of applications using libexif. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 709-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

Debian DSA-709-1 : libexif - buffer overflow

Sylvain Defresne discovered a buffer overflow in libexif, a library that parses EXIF files such as JPEG files with extra tags. This bug could be exploited to crash the application and maybe to execute arbitrary code as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

DSA-709-1 libexif - buffer overflow

Bulletin has no description...

Mandrake Linux Security Advisory : libexif (MDKSA-2005:064)

A buffer overflow was discovered in the way libexif parses EXIF tags. An attacker could exploit this by creating a special EXIF image file which could cause image viewers linked against libexif to crash. The updated packages have been patched to correct these issues. %NASLMINLEVEL 70300 C Tenable...

Low: Red Hat Security Advisory: libexif security update

Updated libexif packages that fix a buffer overflow issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. A bug was found in t...

RHEL 4 : libexif (RHSA-2005:300)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:300 advisory. The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. A bug was found in the way libexif parses EXIF...

GLSA-200503-17 : libexif: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-17 libexif: Buffer overflow vulnerability libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause...

libexif: Buffer overflow vulnerability

Background libexif is a library for parsing, editing and saving EXIF data. Description libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause applications linked to libexif to cras...

Libexif buffer overflow

Buffer overflow during EXIF tags parsing...

[USN-91-1] EXIF library vulnerability

=========================================================== Ubuntu Security Notice USN-91-1 March 07, 2005 libexif vulnerabilities https://bugzilla.ubuntulinux.org/7152 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10...

CVE-2005-0664

CVE-2005-0664 concerns a buffer overflow in libexif 0.6.9 due to improper validation of EXIF tag structures, enabling a crafted JPEG image to cause an application crash and potentially allow remote code execution. Publicly documented impact is a crash and possible arbitrary code execution, with e...

CVE-2005-0664: Undefined Security Weakness

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

libexif -- buffer overflow vulnerability

Sylvain Defresne reports that libexif is vulnerable to a buffer overflow vulnerability due to insufficient input checking. This could lead crash of applications using libexif...