CVE-2008-2696: Undefined Security Weakness

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

Debian DSA-1474-1 : exiv2 - integer overflow

Meder Kydyraliev discovered an integer overflow in the thumbnail handling of libexif, the EXIF/IPTC metadata manipulation library, which could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

GLSA-200712-16 : Exiv2: Integer overflow

The remote host is affected by the vulnerability described in GLSA-200712-16 Exiv2: Integer overflow Meder Kydyraliev Google Security discovered an integer overflow vulnerability in the JpegThumbnail::setDataArea method leading to a heap-based buffer overflow. Impact : An attacker could entice th...

Exiv2: Integer overflow

Background Exiv2 is a C++ library and set of tools for parsing, editing and saving Exif and IPTC metadata from images. Exif, the Exchangeable image file format, specifies the addition of metadata tags to JPEG, TIFF and RIFF files. Description Meder Kydyraliev Google Security discovered an integer...

Fedora 7 : exiv2-0.15-5.fc7 (2007-4591)

Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 - Tue Sep 18 2007 Rex Dieter 0.15-4 - -libs: -Requires: %name - Tue Aug 21 2007 Rex Dieter 0.15-3 - -libs subpkg to be multilib-friendlier f8+ - Sat Aug 11 2007 Rex Dieter 0.15-2 - License: GPLv2+ - Thu Jul 12 2007 Rex Dieter 0.15-1 -...

Fedora 8 : exiv2-0.15-5.fc8 (2007-4551)

Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] Fedora 8 Update: exiv2-0.15-5.fc8

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

[SECURITY] Fedora 7 Update: exiv2-0.15-5.fc7

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

Integer overflow

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

DEBIAN-CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2007-6353

CVE-2007-6353 is an integer overflow in the Exiv2 library (in exif.cpp) that allows context-dependent attackers to trigger a heap-based buffer overflow via a crafted EXIF file, potentially enabling arbitrary code execution. Public disclosures across multiple OS advisories confirm impact on libexi...

CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2007-6353: Integer Overflow or Wraparound

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2007-6353

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...

CVE-2005-4676

The CVE-2005-4676 vulnerability is a buffer overflow in Exiv2 before 0.9 caused by not null-terminating strings before sscanf when parsing IPTC metadata, enabling remote attackers to crash the application via crafted images. Affected: Exiv2

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...