956 matches found
libexif: Buffer overflow
Background libexif is a library for parsing, editing and saving EXIF metadata from images. Description iDefense Labs have discovered that the exifdataloaddataentry function in libexif/exif-data.c improperly handles integer data while working with an image with many EXIF components, allowing an...
[SECURITY] Fedora Core 5 Update: libexif-0.6.12-5
Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags...
Mandrake Linux Security Advisory : libexif (MDKSA-2007:128)
Another integer overflow was found in the way libexif parses EXIF image tags. An individual who opened a carefully-crafted EXIF image file could cause the application linked against libexif to crash or possibly execute arbitrary code. Updated packages have been patched to prevent this issue...
Debian DSA-1310-1 : libexif - integer overflow
A vulnerability has been discovered in libexif, a library to parse EXIF files, which allows denial of service and possible execution of arbitrary code via malformed EXIF data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
RHEL 4 / 5 : libexif (RHSA-2007:0501)
Updated libexif packages that fix an integer overflow flaw are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif package contains the EXIF library. Applications use this library to...
CentOS 4 / 5 : libexif (CESA-2007:0501)
Updated libexif packages that fix an integer overflow flaw are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif package contains the EXIF library. Applications use this library to...
[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-1310-1 [email protected] http://www.debian.org/security/ Steve Kemp June 16, 2007 - ------------------------------------------------------------------------ Package : libexif 0.6.13-5etch1...
[SECURITY] [DSA 1309-1] New libexif packages fix integer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA-1309-1 [email protected] http://www.debian.org/security/ Steve Kemp June 16, 2007 - ------------------------------------------------------------------------ Package : libexif 0.6.9-6sarge1...
libexif security update
CentOS Errata and Security Advisory CESA-2007:0501 Updated libexif packages that fix an integer overflow flaw are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif package contains t...
DSA-1310-1 libexif
Bulletin has no description...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
DEBIAN-CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
CVE-2006-4168
CVE-2006-4168 affects libexif prior to 0.6.16, where an integer overflow in exif_data_load_data_entry can trigger a heap-based overflow when processing images with many EXIF components. This can lead to denial of service (crash) and, in at least some advisories, arbitrary code execution. Multiple...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
CVE-2006-4168
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
Moderate: Red Hat Security Advisory: libexif integer overflow
Updated libexif packages that fix an integer overflow flaw are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif package contains the EXIF library. Applications use this library to...
libexif integer overflow
Integer overflow in the exifdataloaddataentry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service application crash or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow...
