Lucene search
K

12 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.1 views

The vulnerability of the PHP programming language module exif_thumbnail_extract, related to integer overflow, allows attackers to cause a service failure.

The vulnerability of the exifthumbnailextract module in the PHP programming language is related to a numerical overflow in the buffer-based queue. Exploiting this vulnerability can allow an attacker to cause service failures...

7.5CVSS6.5AI score0.2126EPSS
Exploits1References5Affected Software2
OSV
OSV
added 2018/08/03 1:29 p.m.30 views

CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exifthumbnailextract of exif.c...

7.5CVSS6.8AI score
Exploits0References10
OSV
OSV
added 2018/08/03 1:29 p.m.1 views

ALPINE-CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exifthumbnailextract of exif.c...

7.5CVSS7.2AI score0.2126EPSS
Exploits1References1
OSV
OSV
added 2018/08/03 12:0 a.m.0 views

UBUNTU-CVE-2018-14883

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exifthumbnailextract of exif.c...

7.5CVSS6.8AI score0.2126EPSS
Exploits1References6
OSV
OSV
added 2014/10/30 11:56 a.m.1 views

USN-2391-1 php5 vulnerabilities

Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. CVE-2014-3668 Symeon Paraschoudis discovered that PHP incorrectly handled unserializing objects. A remote...

7.5CVSS7.4AI score0.55955EPSS
Exploits3References5
OSV
OSV
added 2014/10/28 11:33 a.m.18 views

MGASA-2014-0430 Updated php packages fix security vulnerabilities

An integer overflow flaw in PHP's unserialize function was reported. If unserialize were used on untrusted data, this issue could lead to a crash or potentially information disclosure CVE-2014-3669. A heap corruption issue was reported in PHP's exifthumbnail function. A specially-crafted JPEG ima...

7.5CVSS8.6AI score0.55955EPSS
Exploits2References8
Mageia
Mageia
added 2014/10/28 11:33 a.m.53 views

Updated php packages fix security vulnerabilities

An integer overflow flaw in PHP's unserialize function was reported. If unserialize were used on untrusted data, this issue could lead to a crash or potentially information disclosure CVE-2014-3669. A heap corruption issue was reported in PHP's exifthumbnail function. A specially-crafted JPEG ima...

7.5CVSS8AI score0.55955EPSS
Exploits2References7
Cvelist
Cvelist
added 2005/02/16 5:0 a.m.12 views

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

5.3AI score0.00131EPSS
Exploits1References2
CVE
CVE
added 2005/02/16 5:0 a.m.37 views

CVE-2005-0406

Technical details about CVE-2005-0406 are not publicly provided in the connected documents (no explicit affected products, versions, vectors, or fixes). Monitor for updates.

5.5CVSS5.3AI score0.00131EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2005/02/16 5:0 a.m.28 views

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

5.5CVSS6.1AI score0.00131EPSS
Exploits1
OSV
OSV
added 2005/02/14 5:0 a.m.5 views

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

5.5CVSS6.3AI score
Exploits0References4
NVD
NVD
added 2005/02/14 5:0 a.m.10 views

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

5.5CVSS5.3AI score0.00131EPSS
Exploits1References2
Rows per page
Query Builder