Lucene search
+L

171 matches found

OSV
OSV
added 2021/08/09 6:15 p.m.2 views

DEBIAN-CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.2AI score0.01051EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/09 6:15 p.m.4 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.5AI score0.01051EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2021/08/09 12:0 a.m.52 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5AI score0.01051EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/08/09 12:0 a.m.66 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5.6AI score0.01109EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/08/09 12:0 a.m.50 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5.6AI score0.01051EPSS
Exploits0
Debian CVE
Debian CVE
added 2021/08/09 12:0 a.m.57 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.6AI score0.01109EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/07/14 12:0 a.m.3 views

PT-2021-7697 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: The issue is related to an infinite loop in Exiv2 when modifying the metadata of a crafted image file, potentially allowing an attacker to cause a denial of service. This bug is triggered when...

8.1CVSS5.8AI score0.03098EPSS
Exploits21References199
Fedora
Fedora
added 2021/05/05 1:4 a.m.60 views

[SECURITY] Fedora 32 Update: perl-Image-ExifTool-12.16-3.fc32

ExifTool is a Perl module with an included command-line application for reading and writing meta information in image, audio, and video files. It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2, TIFF, GIF,...

7.8CVSS7.6AI score0.99981EPSS
Exploits39
Fedora
Fedora
added 2021/05/05 12:54 a.m.115 views

[SECURITY] Fedora 33 Update: perl-Image-ExifTool-12.16-3.fc33

ExifTool is a Perl module with an included command-line application for reading and writing meta information in image, audio, and video files. It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2, TIFF, GIF,...

7.8CVSS7.6AI score0.99981EPSS
Exploits39
OpenVAS
OpenVAS
added 2021/05/05 12:0 a.m.28 views

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.4AI score0.99981EPSS
Exploits39References4
Fedora
Fedora
added 2021/05/04 1:1 a.m.52 views

[SECURITY] Fedora 34 Update: exiv2-0.27.3-6.fc34

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

7.8CVSS1.6AI score0.02295EPSS
Exploits2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability in the `Exiv2::IptcParser::decode` function of the `iptc.cpp` file in the media metadata management library Exiv2, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability in the Exiv2::IptcParser::decode function of the iptc.cpp file in the media metadata management library Exiv2 is related to incorrect processing of PSD files. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS6.7AI score0.01816EPSS
Exploits0References12Affected Software5
RedHat Linux
RedHat Linux
added 2020/04/28 3:31 p.m.6 views

exiv2: out of bounds read in IptcData::printStructure in iptc.c

REJECTED CVE An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory...

5.8AI score
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:31 p.m.9 views

exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...

6.5CVSS6AI score0.01816EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/04/28 3:31 p.m.6 views

exiv2: out of bounds read in IptcData::printStructure in iptc.c

An out-of-bounds read vulnerability has been discovered in IptcData::printStructure in iptc.cpp file of Exiv2 0.26. An attacker could cause a crash or an information leak by providing a crafted image...

8.1CVSS5.7AI score0.01992EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2019/08/23 12:0 a.m.5 views

PT-2019-6193 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.99.0 Description: The issue is related to an invalid memory access in the decode function of the iptc.cpp component in the Exiv2 library, which can lead to a buffer overflow. This allows a remote attacker to cause a denial ...

7.1CVSS6.3AI score0.01332EPSS
Exploits1References14
RedHat Linux
RedHat Linux
added 2019/08/06 2:22 p.m.28 views

exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp

An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory...

6.5CVSS5.8AI score0.02172EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2019/08/06 2:22 p.m.5 views

exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...

6.5CVSS6AI score0.01816EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2019/08/06 2:22 p.m.6 views

exiv2: out of bounds read in IptcData::printStructure in iptc.c

An out-of-bounds read vulnerability has been discovered in IptcData::printStructure in iptc.cpp file of Exiv2 0.26. An attacker could cause a crash or an information leak by providing a crafted image...

8.1CVSS5.7AI score0.01992EPSS
Exploits1References4
OSV
OSV
added 2019/07/15 6:15 p.m.1 views

DEBIAN-CVE-2019-1010302

jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 showIPTC. The attack vector is: the victim must open a specially crafted JPEG file...

5.5CVSS6AI score0.00969EPSS
Exploits1References1
Rows per page
Query Builder