5 matches found
DEBIAN-CVE-2024-28573
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the jpegreadexifprofile function when reading images in JPEG format...
SUSE CVE-2015-0232
The exifprocessunicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service uninitialized pointer free and application crash via crafted EXIF data in a JPEG image...
SUSE CVE-2021-3482
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data...
PT-2020-3996 · Unknown · Responsive Filemanager
Name of the Vulnerable Software and Affected Versions: Responsive Filemanager versions through 9.14.0 Description: An issue was discovered in the ajax calls.php file, specifically in the save img action, where the name parameter lacks validation of the sent extension. This allows for the executio...
PHP 'exif_process_unicode' function remote code execution vulnerability
PHP is a widely used general purpose scripting language. A remote code execution vulnerability in the exifprocessunicode function in PHP ext/exif/exif.c allows remote attackers to cause a denial of service by executing arbitrary code or EXIF data crafted from JPEG images...