CVE-2019-1010301

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
jhead	jhead	3.03

References

https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1838251Exploit, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1679952Exploit, Issue Tracking, Third Party Advisory
https://launchpadlibrarian.net/435112680/32_crash_in_gpsinfoMailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00037.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WVQTORTGQE56XXC6OVHQCSCUGABRMQZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTGUHTJTQ6EKEPDXFSKZKVLUJC4UAPBQ/
https://security.gentoo.org/glsa/202007-17Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1838251Exploit, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1679952Exploit, Issue Tracking, Third Party Advisory
https://launchpadlibrarian.net/435112680/32_crash_in_gpsinfoMailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00037.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WVQTORTGQE56XXC6OVHQCSCUGABRMQZ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTGUHTJTQ6EKEPDXFSKZKVLUJC4UAPBQ/
https://security.gentoo.org/glsa/202007-17Third Party Advisory

Timeline

Published: Jul 15, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-10103025.5jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The at CVE-2019-10103045.3Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is CVE-2019-10103055.5libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() CVE-2019-10103069.8Slanger 0.6.0 is affected by: Remote Code Execution (RCE). The impact is: A remote attacker can execute arbitrary commands by sending a craf CVE-2019-10103075.4GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to priv CVE-2019-10103089.8Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is no CVE-2019-10103103.5GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description CVE-2019-10103146.1Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable re CVE-2019-10103155.5WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/servic CVE-2019-10103167.8pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. T CVE-2019-10103175.5WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfa CVE-2019-10103195.5WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfa