CVE-2009-3895

Heap-based buffer overflow in the exifentryfix function aka the tag fixup routine in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party...

PT-2009-6117 · None · Libexif

Name of the Vulnerable Software and Affected Versions: libexif version 0.6.18 Description: The issue is related to a heap-based buffer overflow in the exif entry fix function, which can be triggered by an invalid EXIF image. This could lead to a denial of service or potentially allow the executio...

libexif库exif-entry.c标签格式转换堆溢出漏洞

BUGTRAQ ID: 37022 libexif是用C编写的函数库，用于从图形文件中读写EXIF元信息。 libexif库的libexif/libexif/exif-entry.c文件中的exifentryfix函数在将8位整数数组转换为16位整数时存在堆溢出漏洞，用户受骗打开了畸形的EXIF图形就可以触发这个溢出，导致使用该库的应用程序崩溃或执行任意代码。 libexif 0.6.18 厂商补丁： libexif ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SLES10: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES10: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...

SLES9: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021388 within the SuS...

SLES9: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010513 within the SuS...

SLES9: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012800 within the SuS...

SLES9: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021388 within the SuS...

SLES9: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010513 within the SuS...

SLES9: Security update for libexif

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012800 within the SuS...

SuSE9 Security Update : libexif (YOU Patch Number 11555)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE9 Security Update : libexif (YOU Patch Number 12045)

Two bugs in libexif were identified by a Google Security Audit done by Meder Kydyraliev. - Loading EXIF data could be used to cause a infinite recursion and crash. CVE-2007-6351 - Integer overflows in the thumbnail handler could be used to overflow buffers and potentially execute code or crash a...

Ubuntu 6.06 LTS / 7.04 / 7.10 : libexif vulnerabilities (USN-654-1)

Meder Kydyraliev discovered that libexif did not correctly handle certain EXIF headers. If a user or automated system were tricked into processing a specially crafted image, a remote attacker could cause the application linked against libexif to crash, leading to a denial of service, or possibly...

Mandriva Linux Security Advisory : libexif (MDVSA-2008:005)

An infinite recursion flaw was found in the way that libexif parses Exif image tags. A carefully crafted Exif image file opened by an application linked against libexif could cause the application to crash CVE-2007-6351. An integer overflow flaw was also found in how libexif parses Exif image tag...

Mandriva Update for libexif MDKSA-2007:118 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libexif MDKSA-2007:128 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:128 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libexif MDKSA-2007:118 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDKSA-2007:118 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libexif MDVSA-2008:005 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDVSA-2008:005 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for libexif MDVSA-2008:005 (libexif)

Check for the Version of libexif OpenVAS Vulnerability Test Mandriva Update for libexif MDVSA-2008:005 libexif Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...