PT-2018-6762

Name of the Vulnerable Software and Affected Versions: Exempi versions prior to 2.4.3 Description: An issue in the VPXChunk class in XMPFiles/source/FormatSupport/WEBP Support.cpp allows remote attackers to cause a denial of service via a crafted .webp file, due to the class not ensuring nonzero...

PT-2017-3957

Name of the Vulnerable Software and Affected Versions Exempi versions prior to 2.4.4 Description The issue is caused by an integer overflow in the Chunk class. This allows remote attackers to cause a denial of service, specifically an infinite loop, via crafted XMP data in a .avi file...

PT-2017-3960

Name of the Vulnerable Software and Affected Versions Exempi versions prior to 2.4.4 Description The issue is related to the TradQT Manager::ParseCachedBoxes function, which allows remote attackers to cause a denial of service, potentially through an infinite loop or use-after-free error, via...

Updated exempi exiv2 packages fix security vulnerability

exempi contains code to protect against a denial-service-attack related to XML entity expansion "billion laughs attack", but it was not compiled into the Mageia package because BanAllEntityUsage was not defined when the package was compiled. This has been corrected by recompiling it with the...

MGASA-2016-0101 Updated exempi exiv2 packages fix security vulnerability

exempi contains code to protect against a denial-service-attack related to XML entity expansion "billion laughs attack", but it was not compiled into the Mageia package because BanAllEntityUsage was not defined when the package was compiled. This has been corrected by recompiling it with the...

PT-2016-7949

Name of the Vulnerable Software and Affected Versions exempi affected versions not specified exiv2 affected versions not specified Description The issue is related to XML entity expansion, also known as a "billion laughs attack", which can lead to a denial-of-service attack. The exempi and exiv2...