13 matches found
CVE-2018-18915
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...
Input validation
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...
CVE-2018-18915
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...
CVE-2018-18915: Loop with Unreachable Exit Condition
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...
Denial Of Service (DoS) Through Heap Buffer Overflow
libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in basicio.cpp which causes an out-of-bounds write in Exiv2::Image::printIFDStructure and leads to a DoS attack, and possibly other attacks...
PT-2018-19201
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function, located in the image.cpp file. This can be exploited by remote attackers to cause a denial of service using a crafted...
CVE-2017-14863
A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
PT-2017-13733
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A NULL pointer dereference was discovered in the Exiv2::Image::printIFDStructure function in image.cpp, which causes a segmentation fault and application crash, leading to denial of service. Recommendations For...
PT-2017-19364
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer overflow in the basicio.cpp file, which causes an out-of-bounds write in the Exiv2::Image::printIFDStructure function. This may lead to a remote denial of service or possibly othe...
CVE-2017-12955: Improper Restriction of Operations within the Bounds of a Memory Buffer
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...
PT-2017-19357
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp. A crafted input can cause a remote denial of service attack. Recommendations For Exiv2 version 0.26, consider...
PT-2017-11938
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp. A crafted input can lead to a remote denial of service attack. Recommendations For Exiv2 version 0.26, consid...
