956 matches found
libexif integer overflow
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...
Moderate: Red Hat Security Advisory: libexif security update
Updated libexif packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specification that...
Moderate: Red Hat Security Advisory: libexif security update
Updated libexif packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specificatio...
libexif infinite recursion flaw (DoS)
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service infinite recursion via an image file with crafted EXIF tags, possibly involving the exifloaderwrite function in exifloader.c...
libexif integer overflow
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exifdataloaddatathumbnail function in exif-data.c...
Moderate:libexif security update
0.6.13-4.0.2.el51.1 - Add patch for CVE-2007-6351. Fixes bug 425681 - Add patch for CVE-2007-6352. Fixes bug 425681...
Moderate: libexif security update
0.5.12-5.1.0.2.el46.1 - Add patch for CVE-2007-6352. Fixes bug 425651...
Security fix for the ALT Linux 7 package libexif version 0.6.16-alt2
Dec. 17, 2007 Dmitriy Khanzhin 0.6.16-alt2 - security fixes: + CVE-2007-6351, CVE-2007-6352 upstream patches + thanks ldv@ for information - licence tag changed to LGPLv2+...
SuSE 10 Security Update : libexif (ZYPP Patch Number 3721)
A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...
Ubuntu 6.06 LTS / 6.10 / 7.04 : libexif vulnerability (USN-471-1)
Victor Stinner discovered that libexif did not correctly validate the size of some EXIF header fields. By tricking a user into opening an image with specially crafted EXIF headers, a remote attacker could cause the application using libexif to crash, resulting in a denial of service. Note that...
Ubuntu 6.06 LTS / 6.10 / 7.04 : libexif vulnerability (USN-478-1)
Sean Larsson discovered that libexif did not correctly verify the size of EXIF components. By tricking a user into opening an image with specially crafted EXIF headers, a remote attacker could cause the application using libexif to execute arbitrary code with user privileges. Note that Tenable...
Fedora 7 : libexif-0.6.15-2.fc7 (2007-0414)
The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. An integer overflow flaw was found in the way libexif parses EXIF image tags. If a victim opens a carefully crafted EXIF image file it could cause the application linked against libexif to...
openSUSE 10 Security Update : libexif (libexif-3703)
A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
openSUSE 10 Security Update : libexif (libexif-3718)
A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...
SUSE-SA:2007:039: libexif
The remote host is missing the patch for the advisory SUSE-SA:2007:039 libexif. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:039 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...
Slackware 10.2 / 11.0 / current : libexif (SSA:2007-164-01)
New libexif packages are available for Slackware 10.2, 11.0, and -current to fix a crash and potential security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-164-01. The text...
Fedora Core 6 : libexif-0.6.15-2.fc6 (2007-614)
The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. An integer overflow flaw was found in the way libexif parses EXIF image tags. If a victim opens a carefully crafted EXIF image file it could cause the application linked against libexif to...
USN-478-1: libexif vulnerability
Sean Larsson discovered that libexif did not correctly verify the size of EXIF components. By tricking a user into opening an image with specially crafted EXIF headers, a remote attacker could cause the application using libexif to execute arbitrary code with user privileges...
GLSA-200706-09 : libexif: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200706-09 libexif: Buffer overflow iDefense Labs have discovered that the exifdataloaddataentry function in libexif/exif-data.c improperly handles integer data while working with an image with many EXIF components, allowing an...
Fedora Core 5 : libexif-0.6.12-5 (2007-605)
The libexif package contains the EXIF library. Applications use this library to parse EXIF image files. An integer overflow flaw was found in the way libexif parses EXIF image tags. If a victim opens a carefully crafted EXIF image file it could cause the application linked against libexif to...