CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

UBUNTU-CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

Format string

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

DEBIAN-CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

PT-2018-13629

Name of the Vulnerable Software and Affected Versions jhead version 3.00 Description The issue is related to the ProcessGpsInfo function in the gpsinfo.c file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file. This is due ...

CVE-2018-17088: Integer Overflow or Wraparound

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is...

CVE-2018-16554: Use of Externally-Controlled Format String

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

CVE-2018-16388

e107web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type...

Design/Logic Flaw

e107web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type...

CVE-2018-16388

e107web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php filename with the image/jpeg content type...

Code injection

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

CVE-2018-16781

CVE-2018-16781 affects the ffjpeg library (ffjpeg.dll). Affected: ffjpeg versions prior to 2018-08-22. Vulnerability: processing a progressive JPEG file that lacks an AC Huffman table can trigger a denial of service (FPE signal). Impact: remote attackers can cause DoS via crafted images. Root cau...

PT-2018-13744 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2018-08-22 Description: The issue allows remote attackers to cause a denial of service via a progressive JPEG file that lacks an AC Huffman table, resulting in an FPE signal. Recommendations: For versions prior to...

CVE-2018-16781: Incorrect Calculation

ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service FPE signal via a progressive JPEG file that lacks an AC Huffman table...

[SECURITY] Fedora 28 Update: gd-2.2.5-6.fc28

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...