CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

DEBIAN-CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

[SECURITY] [DSA 708-1] New PHP3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 708-1 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2005 http://www.debian.org/security/faq -...

DSA-708-1 php3 - missing input sanitising

Bulletin has no description...

Debian DSA-708-1 : php3 - missing input sanitising

An iDEFENSE researcher discovered two problems in the image processing functions of PHP, a server-side, HTML-embedded scripting language, of which one is present in PHP3 as well. When reading a JPEG image, PHP can be tricked into an endless loop due to insufficient input validation. %NASLMINLEVEL...

Debian DSA-709-1 : libexif - buffer overflow

Sylvain Defresne discovered a buffer overflow in libexif, a library that parses EXIF files such as JPEG files with extra tags. This bug could be exploited to crash the application and maybe to execute arbitrary code as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

DSA-709-1 libexif - buffer overflow

Bulletin has no description...

CVE-2005-0525

The phpnextmarker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service infinite loop via a JPEG image with an invalid marker value, which causes a negative length value to be passed to...

CVE-2005-0903

CVE-2005-0903 is a concrete vulnerability in Apple QuickTime PictureViewer (versions around 6.5.1, with advisories noting 6.5.2 as a fix). The issue is a buffer overflow in the PictureViewer component when parsing JPEG images containing crafted Huffman Table (DHT) data, enabling remote denial of ...

CVE-2005-0903

Buffer overflow in QuickTime PictureViewer 6.5.1 allows remote attackers to cause a denial of service application crash via a JPEG file with crafted Huffman Table marker DHT data...

QuickTime malformed JPEG buffer overflow

When fuzzing some application with malformed input files, if we want to discover some vulnerability we have to create input file which is very close to valid file but yet malformed in some way. In that way chances for discovery are greater. Now let's play with JPEG format. We concentrate on Huffm...

Apple QuickTime JPEG buffer overflow

Buffer overflow on JPEG format parsing...

QuickTime < 6.5.2 PictureViewer Malformed JPEG Overflow (Windows)

The remote host is using QuickTime, a popular media player/Plug-in that handles many Media files. The remote version of this software contains a buffer overflow vulnerability in its PictureViewer that could allow an attacker to execute arbitrary code on the remote host. To exploit this...

Microsoft Windows GDI JPEG Processing Buffer Overrun (MS04-028; CVE-2004-0200)

...

CVE-2005-0664

CVE-2005-0664 concerns a buffer overflow in libexif 0.6.9 due to improper validation of EXIF tag structures, enabling a crafted JPEG image to cause an application crash and potentially allow remote code execution. Publicly documented impact is a crash and possible arbitrary code execution, with e...

CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2005-0664

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2005-0406

Technical details about CVE-2005-0406 are not publicly provided in the connected documents (no explicit affected products, versions, vectors, or fixes). Monitor for updates.

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...