Exiv2 - Corrupted EXIF Data Denial of Service

source: https://www.securityfocus.com/bid/16400/info Exiv2 is susceptible to a denial-of-service vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input data before attempting to read it, resulting in an out-of-bounds memory access crash. This...

CVE-2005-2734

Cross-site scripting XSS vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...

CVE-2005-2737

Cross-site scripting XSS vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...

CVE-2005-2735

CVE-2005-2735 describes a cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier . The flaw allows remote attackers to inject arbitrary web script or HTML via EXIF data (e.g., Camera Model Tag) . Documented impact indicates that the vulnerability can be triggered through crafted...

CVE-2005-2734

Gallery: XSS via EXIF data (CVE-2005-2734) affects Gallery 1.5.1-RC2 and earlier. An attacker can inject script/HTML through EXIF fields (e.g., Camera Model Tag). Debian/DSA-1148 and OpenVAS references indicate remote, pre-patch exposure; remediation is upgrading to fixed Gallery packages (e.g., ...

CVE-2005-2734

Cross-site scripting XSS vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...

CVE-2005-2737

Cross-site scripting XSS vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...

CVE-2005-2736

CVE-2005-2736 describes a cross-site scripting (XSS) vulnerability in the web gallery application YaPiG (versions ≤ 0.95). The flaw arises from processing EXIF data (e.g., the Camera Model Tag) without sufficient sanitization, allowing an attacker to inject arbitrary web script or HTML that can b...

CVE-2005-2736

Cross-site scripting XSS vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...

Coppermine Photo Gallery EXIF Data XSS

According to its banner, the version of Coppermine Gallery installed on the remote host is prone to cross-site scripting attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...

PhotoPost PHP Pro EXIF Data XSS

According to its banner, the version of PhotoPost PHP Pro installed on the remote web server is prone to script insertion attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...

phpGraphy EXIF Data XSS

The remote host is running phpGraphy, a web-based photo album. According to its banner, the version of phpGraphy installed on the remote host is prone to script insertion attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an...

Gallery EXIF Data XSS

According to its banner, the version of Gallery hosted on the remote web server is prone to script insertion attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML and script...

Gallery < 1.5.3-RC3 EXIF Data XSS

Binary data 3185.prm...

PhotoPost < 5.11 PHP Pro EXIF Data XSS

Binary data 3187.prm...

[SA16594] Gallery EXIF Data Script Insertion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16597] PhotoPost PHP Pro EXIF Data Script Insertion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16595] phpGraphy EXIF Data Script Insertion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

YaPiG EXIF Data Script Injection

Binary data 3186.prm...

CVE-2005-2676

Cross-site scripting XSS vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data...