Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:53 a.m.2 views

SUSE CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

6.1CVSS6.6AI score0.00876EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/10/17 12:0 a.m.3 views

jhead 操作系统命令注入漏洞

jhead is a tool for modifying JPEG file information. An operating system command injection vulnerability exists in jhead version 3.06.0.1. An attacker can exploit this vulnerability to execute arbitrary commands...

7.8CVSS7.7AI score0.00444EPSS
Exploits1References12
OSV
OSV
added 2022/02/02 12:15 p.m.1 views

UBUNTU-CVE-2020-26208

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

6.1CVSS6.8AI score0.00876EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2022/02/02 11:51 a.m.6 views

CVE-2020-26208 Heap-buffer-overflow in jhead

JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting i...

5.3CVSS6.3AI score0.00876EPSS
Exploits1References4
CNVD
CNVD
added 2020/01/09 12:0 a.m.2 views

jhead heap buffer overflow vulnerability

jhead is a tool for modifying JPEG file information. A buffer overflow vulnerability exists in the 'Get32' function in jhead 3.04 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting in...

7.1CVSS7.9AI score0.01435EPSS
Exploits1References1
CNVD
CNVD
added 2018/09/18 12:0 a.m.3 views

jhead denial of service vulnerability (CNVD-2018-19092)

jhead is a tool for modifying JPEG file information. A denial of service vulnerability exists in the 'ProcessGpsInfo' function of the gpsinfo.c file in jhead version 3.00, which can be exploited by remote attackers to cause a denial of service with the help of a malicious JPEG file...

7.8CVSS7.3AI score0.01557EPSS
Exploits1References1
Debian
Debian
added 2017/03/31 6:1 p.m.26 views

[SECURITY] [DSA 3825-1] jhead security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3825-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 31, 2017 https://www.debian.org/security/faq -...

6.8CVSS2.5AI score0.01267EPSS
Exploits0
Rows per page
Query Builder