CVE-2006-4168

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...

CVE-2006-4168

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...

DEBIAN-CVE-2006-4168

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...

CVE-2006-4168

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...

CVE-2006-4168

CVE-2006-4168 affects libexif prior to 0.6.16, where an integer overflow in exif_data_load_data_entry can trigger a heap-based overflow when processing images with many EXIF components. This can lead to denial of service (crash) and, in at least some advisories, arbitrary code execution. Multiple...

CVE-2006-4168

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...

Moderate: Red Hat Security Advisory: libexif integer overflow

Updated libexif packages that fix an integer overflow flaw are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif package contains the EXIF library. Applications use this library to...

libexif integer overflow

Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...

Moderate: libexif security update: integer overflow

Add patch for CVE-2007-4168. Fix bug 243893 - Fix bug 240055...

[SECURITY] Fedora 7 Update: libexif-0.6.15-2.fc7

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...

iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability

Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability iDefense Security Advisory 06.13.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 13, 2007 I. BACKGROUND Exchangeable image file format Exif is an industry standard image tagging technology used by many digital...

libexif library integer overflow

Integer overflow on EXIF data parsing...

Fedora Core 6 : libexif-0.6.15-1.fc6 (2007-548)

This update to the latest upstream release fixes a number of bugs, among them a possible integer overflow in the exifdataloaddataentry function CVE-2007-2645, which allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted EXIF data...

Mandrake Linux Security Advisory : libexif (MDKSA-2007:118)

Integer overflow in the exifdataloaddataentry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted EXIF data. Updated packages have been patched to prevent this issue. %NASLMINLEVEL...

USN-471-1: libexif vulnerability

Victor Stinner discovered that libexif did not correctly validate the size of some EXIF header fields. By tricking a user into opening an image with specially crafted EXIF headers, a remote attacker could cause the application using libexif to crash, resulting in a denial of service...

GLSA-200706-01 : libexif: Integer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200706-01 libexif: Integer overflow vulnerability Victor Stinner reported an integer overflow in the exifdataloaddataentry function from file exif-data.c while handling Exif data. Impact : An attacker could entice a user to proces...

libexif: Integer overflow vulnerability

Background libexif is a library for parsing, editing and saving Exif data. Description Victor Stinner reported an integer overflow in the exifdataloaddataentry function from file exif-data.c while handling Exif data. Impact An attacker could entice a user to process a file with specially crafted...

rPSA-2007-0115-1 libexif

rPath Security Advisory: 2007-0115-1 Published: 2007-06-04 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: libexif=/conary.rpath.com@rpl:devel//1/0.6.15-0.1-1 References: https://vulners.com/cve/CVE-2007-2645...

[SECURITY] Fedora 7 Update: libexif-0.6.15-1.fc7

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...

CVE-2007-2645

Integer overflow in the exifdataloaddataentry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via crafted EXIF data, involving the 1 doff or 2 s variable...