Detections
Analytics
CVE-2009-3895
high
Description
Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party information.
References
https://github.com/ngtuonghung/CVE-2009-3895-CVE-2012-2836
https://github.com/0xp055um/ndays
https://github.com/antonio-morales/Fuzzing101
https://exchange.xforce.ibmcloud.com/vulnerabilities/54275
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3866
http://www.vupen.com/english/advisories/2009/3243
http://www.securityfocus.com/bid/37022
http://www.openwall.com/lists/oss-security/2009/11/19/2
http://sourceforge.net/mailarchive/message.php?msg_name=20091113072359.GA22681%40coneharvesters.com
http://secunia.com/advisories/37378