libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc

A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by an application linked to Poppler, would crash the application causing a denial of service...

EulerOS 2.0 SP2 : poppler (EulerOS-SA-2020-2386)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent...

[SECURITY] [DLA 2418-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2418-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2020 https://wiki.debian.org/LTS -...

Amazon Linux 2 : libexif (ALAS-2020-1523)

The version of libexif installed on the remote host is prior to 0.6.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1523 advisory. In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of...

Medium: libexif

Issue Overview: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions:...

Scientific Linux Security Update : evince and poppler on SL7.x x86_64 (20201001)

Security Fixes : - poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc CVE-2019-14494 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141747; scriptversion"1.3";...

USN-4587-1: iTALC vulnerabilities

Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these issues to cause a denial of service or possibly execute arbitrary code. CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055...

Ubuntu 16.04 LTS : iTALC vulnerabilities (USN-4587-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4587-1 advisory. Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these...

CentOS 7 : libexif (RHSA-2020:4040)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4040 advisory. - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media conten...

Oracle Linux 7 : libexif (ELSA-2020-4040)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4040 advisory. 0.6.22-1 - Upgrade to 0.6.22 - Resolves: 1841316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Divide-by-zero Error

The libexif has divide-by-zero error in exifentrygetvalue function in exif-entry.c...

libexif: divide-by-zero in exif_entry_get_value function in exif-entry.c

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

RHEL 7 : libexif (RHSA-2020:4040)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4040 advisory. The libexif packages provide a library for extracting extra information from image files. The following packages have been upgraded to a lat...

EulerOS 2.0 SP3 : libexif (EulerOS-SA-2020-2142)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.CVE-2020-12767 - An issue was discovered in libexif before 0.6.22...

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2020-2106)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent...

Arbitrary Code Execution

vlc is vulnerable to arbitrary code execution. A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c, resulting in a floating point exception via and allows an attacker to execute arbitrary code via a malicious WMV file...

Denial Of Service (DoS)

vlc:bionic is vulnerable to denial of service DoS. A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player. As a result, an FPE can be triggered via a crafted CAF file...

EulerOS 2.0 SP8 : poppler (EulerOS-SA-2020-1875)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at...

SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2020:1553-2)

This update for libexif to 0.6.22 fixes the following issues : Security issues fixed : CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in...