CVEvulnerability

CVE-2005-0406

5.5 MEDIUM Published 2005-02-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-212

Description

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image.

Affected configurations

• image processing project image processing

Related

Weakness · CWE (1)

  • CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness

Referenced by CWE · observed example (3)

  • CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness
  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness
  • CWE-669 Incorrect Resource Transfer Between Spheres weakness

References