CVE-2005-0406 A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information t...
MediumCVSS 5.5
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| image processing project image processing | All versions | No fix listed |
| debian/imagemagick(Debian:12) | All versions | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u10 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u11 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u12 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u13 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u3 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u4 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u5 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u6 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u7 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u8 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.11.60+dfsg-1.6+deb12u9 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.20+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.20+dfsg1-1.1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.20+dfsg1-1.2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-3 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-4 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-5 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-5.1 | No fix listed |
Show 97 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-5.1~exp1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.12.98+dfsg1-5.2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:6.9.13.12+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.33+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.33+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.39+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.39+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.39+dfsg1-3 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.43+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.46+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.47+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.1.47+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.1+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.12+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.13+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.15+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.15+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.16+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.18+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.19+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.21+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.23+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.24+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.25+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.25+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.26+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.27+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.29+dfsg2-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.3+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.31+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.33+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.7+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:12) | = 8:7.1.2.8+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | All versions | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u10 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u11 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u12 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u2 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u3 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u4 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u5 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u6 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u7 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u8 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.43+dfsg1-1+deb13u9 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.46+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.47+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.1.47+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.1+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.12+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.13+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.15+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.15+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.16+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.18+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.19+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.21+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.23+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.24+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.25+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.25+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.26+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.27+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.29+dfsg2-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.3+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.31+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.33+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.7+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:13) | = 8:7.1.2.8+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | All versions | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.1.43+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.1.46+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.1.47+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.1.47+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.1+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.12+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.13+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.15+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.15+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.16+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.18+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.19+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.21+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.23+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.24+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.25+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.25+dfsg1-2 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.26+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.27+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.29+dfsg2-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.3+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.31+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.33+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.7+dfsg1-1 | No fix listed |
| debian/imagemagick(Debian:14) | = 8:7.1.2.8+dfsg1-1 | No fix listed |
References
- 20050214 Advisory: JPEG EXIF information disclosure mailing-list third-party-advisory
- www.redteam-pentesting.de exploit vendor-advisory
- Debian Security Tracker CVE-2005-0406 vendor-advisory
- bugs.debian.org issue-tracking