Debian DSA-2559-1 : libexif - several vulnerabilities

Several vulnerabilities were found in libexif, a library used to parse EXIF meta-data on camera files. - CVE-2012-2812 : A heap-based out-of-bounds array read in the exifentrygetvalue function allows remote attackers to cause a denial of service or possibly obtain potentially sensitive informatio...

PT-2012-4589

Name of the Vulnerable Software and Affected Versions RealPlayer versions prior to 15.0.6.14 RealPlayer SP versions 1.0 through 1.1.5 Mac RealPlayer versions prior to 12.0.1.1750 Description The issue arises from improper handling of codec frame sizes in RealAudio files, allowing remote attackers...

CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

Design/Logic Flaw

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

CVE-2012-1107

TagLib 1.7 and earlier is affected by CVE-2012-1107 due to a flaw in analyzeCurrent (ape/apeproperties.cpp) that can be triggered by a crafted sampleRate in an APE file, causing a divide-by-zero and an application crash (denial of service). Affected component: TagLib’s APE handling; the vulnerabi...

CVE-2012-1107

The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of service application crash via a crafted sampleRate in an ape file, which triggers a divide-by-zero error...

Denial of service

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

CVE-2012-4286

The pcapngreadpacketblock function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted pcap-ng file...

CVE-2012-4286

Wireshark 1.8.x before 1.8.2 is affected by CVE-2012-4286 in the pcap-ng file parser (wiretap/pcapng.c). The vulnerability allows user-assisted remote attackers to cause a denial of service via a crafted pcap-ng file, resulting in a divide-by-zero error and application crash. Remediation per the ...

CVE-2012-4285

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a zero-length message...

CVE-2012-4286

The pcapngreadpacketblock function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted pcap-ng file...

PT-2012-5313

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.0 through 1.8.1 Description The issue allows user-assisted remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted pcap-ng file. This is due to a problem in...

CVE-2012-2837

CVE-2012-2837 affects the EXIF Tag Parsing Library (libexif); the divide-by-zero occurs in mnote_olympus_entry_get_value when formatting EXIF maker note tags, via images with crafted EXIF data. Affected: libexif up to version 0.6.20 (pre-0.6.21). Impact: remote denial of service. Public advisorie...

Denial of service

The igmpheardquery function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service divide-by-zero error and panic via IGMP packets...

CVE-2012-1143

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service divide-by-zero error via a crafted font...

CVE-2012-1143: Undefined Security Weakness

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service divide-by-zero error via a crafted font...

CVE-2012-2396

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

PT-2012-4009

Name of the Vulnerable Software and Affected Versions VideoLAN VLC media player version 2.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted MP4 file. Recommendations For version 2.0.1, consider...

CVE-2012-2396: Undefined Security Weakness

VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted MP4 file...

Denial of service

The pnghandlecHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service divide-by-zero error and application crash via a malformed PNG image containing a cHRM chunk associated with a certain zero value...