Jhead Project Jhead 2.8

CPE Details

Jhead Project Jhead 2.8
jhead_project
jhead
2.8
2020-03-11
12h18 +00:00
2020-03-11
12h18 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:jhead_project:jhead:2.8:*:*:*:*:*:*:*

Informations

Vendor

jhead_project

Product

jhead

Version

2.8

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-26208 2022-02-02 11h51 +00:00 JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images can be provided to the user resulting in a program crash or potentially incorrect exif information retrieval. Users are advised to upgrade. There is no known workaround for this issue.
6.1
Medium
CVE-2020-6624 2020-01-08 23h00 +00:00 jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.
7.1
High
CVE-2020-6625 2020-01-08 23h00 +00:00 jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.
7.1
High
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.