713 matches found
PT-2021-4888 · Adobe +2 · Xmp Toolkit Sdk +2
Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become...
PT-2021-4669 · Adobe +4 · Xmp Toolkit Sdk +4
Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires...
PT-2021-4760 · Adobe +4 · Xmp Toolkit Sdk +4
Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such a...
PT-2021-5097 · Adobe +4 · Xmp Toolkit +4
Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a Buffer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...
PT-2021-5099 · Adobe +4 · Xmp Toolkit +4
Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2020.1 and earlier Description: The issue is related to a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. This can be achieved through a buffer overfl...
PT-2021-4667 · Adobe +4 · Xmp Toolkit Sdk +4
Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...
PT-2021-4731 · Adobe +4 · Xmp Toolkit Sdk +4
Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow in dynamic memory, potentially allowing an attacker to access protected information or cause a denial of service. Exploitation requires user...
APSB21-65 Security updates available for Adobe XMP Toolkit SDK
Adobe has released updates for XMP-Toolkit-SDK. These updates resolve multiple critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution in the context of the current user...
MGASA-2021-0268 Updated python-pikepdf packages fix security vulnerability
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries CVE-2021-29421...
Updated python-pikepdf packages fix security vulnerability
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries CVE-2021-29421...
xmlgraphics-commons: SSRF due to improper input validation by the XMPParser
Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests. Users...
openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)
This update for perl-Image-ExifTool fixes the following issues : Update to version 12.25 fixes boo1185547 CVE-2021-22204 - JPEG XL support is now official - Added read support for Medical Research Council MRC image files - Added ability to write a number of 3gp tags in video files - Added a new...
Security update for perl-Image-ExifTool (important)
openSUSE Security Update: Security update for perl-Image-ExifTool Announcement ID: openSUSE-SU-2021:0707-1 Rating: important References: 1185547 Cross-References: CVE-2021-22204 CVSS scores: CVE-2021-22204 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15....
[SECURITY] Fedora 32 Update: perl-Image-ExifTool-12.16-3.fc32
ExifTool is a Perl module with an included command-line application for reading and writing meta information in image, audio, and video files. It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2, TIFF, GIF,...
[SECURITY] Fedora 33 Update: perl-Image-ExifTool-12.16-3.fc33
ExifTool is a Perl module with an included command-line application for reading and writing meta information in image, audio, and video files. It reads EXIF, GPS, IPTC, XMP, JFIF, MakerNotes, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3 meta information from JPG, JP2, TIFF, GIF,...
Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Improper Restriction of XML External Entity Reference in pikepdf
models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries...
CVE-2021-29421
There's a flaw in the pikepdf Python library's XMP metadata parsing functionality. An attacker who is able to submit a crafted PDF file to be processed by pikepdf could trigger an XML External Entity XXE injection. The highest threat of this flaw is to confidentiality of data...
