openSUSE Security Update : exiv2 (exiv2-267)

This update of exiv2 solves a denial of service bug that can be triggered by using crafted metadata. CVE-2008-2696 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update exiv2-267. The text descripti...

Ubuntu 7.04 / 7.10 / 8.04 LTS : exiv2 vulnerabilities (USN-655-1)

Meder Kydyraliev discovered that exiv2 did not correctly handle certain EXIF headers. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could cause the application linked against libexiv2 to crash, leading to a denial of service, or possibly...

openSUSE 10 Security Update : libexiv2 (libexiv2-5707)

This update of libexiv2 solves a denial of service bug that can be triggered by using crafted metadata. CVE-2008-2696 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libexiv2-5707. The text...

USN-655-1: exiv2 vulnerabilities

Meder Kydyraliev discovered that exiv2 did not correctly handle certain EXIF headers. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could cause the application linked against libexiv2 to crash, leading to a denial of service, or possibly...

CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

CVE-2008-2696

CVE-2008-2696 affects Exiv2 0.16. The vulnerability is triggered by a zero value in Nikon lens information embedded in image metadata, related to the library’s metadata pretty printing and the RationalValue::toLong function, causing a divide-by-zero and an application crash (DoS). The exploitatio...