Exiv2 'Exiv2::Image::printIFDStructure' function denial of service vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'Exiv2::Image::printIFDStructure' function of the image.cpp file in Exiv2 version 0.26. A remote attacker can cause a denial of service infinite loop by exploiting th...

exiv2 'Image::printIFDStructure' Denial of Service Vulnerability

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata, providing fast and easy reading and writing of image metadata in a wide range of EXIF, IPTC and XMP formats. The Image::printIFDStructure security vulnerability in Exiv2 version 0.26. A remote attacker ca...

PYSEC-2017-142

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

PYSEC-2017-112

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue to 0x0, and the value of pValue is 0x0. TiffImageEntry::doWriteImage will use the value of pValue to cause a segmentation fault. To exploit this vulnerability, someone must...

CVE-2017-9239

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue to 0x0, and the value of pValue is 0x0. TiffImageEntry::doWriteImage will use the value of pValue to cause a segmentation fault. To exploit this vulnerability, someone must...

Ubuntu 14.10 : exiv2 vulnerability (USN-2454-1)

It was discovered that Exiv2 incorrectly handled certain tag values in video files. If a user or automated system were tricked into opening a specially crafted video file, a remote attacker could cause Exiv2 to crash, resulting in a denial of service. Note that Tenable Network Security has...

exiv2 / libexiv2 DoS

Division by zero on zero Nikon lens metadata parameter...

DEBIAN-CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

PYSEC-2008-11

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

DEBIAN-CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

CVE-2005-4676

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service application crash via images with crafted IPTC metadata...

PT-2007-7513 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: exiv2 library affected versions not specified Description: The issue is related to an integer overflow in the exif.cpp file of the exiv2 library, which allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that...