Exiv2 'Exiv2::Image::printIFDStructure' function denial of service vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A security vulnerability exists in the 'Exiv2::Image::printIFDStructure' function of the image.cpp file in Exiv2 version 0.26. A remote attacker can cause a denial of service infinite loop by exploiting th...

Exiv2 'Image::printIFDStructure' heap buffer overflow vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A heap buffer overflow vulnerability exists in the...

PT-2017-19356

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid free in the Action::TaskFactory::cleanup function of actions.cpp. A crafted input can lead to a remote denial of service attack. Recommendations For Exiv2 version 0.26, at the...

PT-2017-19357

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp. A crafted input can cause a remote denial of service attack. Recommendations For Exiv2 version 0.26, consider...

PT-2017-19358

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer overflow exists in the Image::printIFDStructure function of image.cpp. This issue can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendations...

PT-2017-19359

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a Segmentation fault in the XmpParser::terminate function, which can be triggered by a crafted input, leading to a remote denial of service attack. Recommendations For Exiv2 version 0.26,...

CVE-2017-11340: Improper Input Validation

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11337: Use After Free

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11336: Out-of-bounds Read

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11339: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

PT-2017-19355

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer over-read issue exists in the Image::printIFDStructure function in image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...

CVE-2017-11338: Loop with Unreachable Exit Condition

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11336

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11337

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11338

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11336

There is a confirmed vulnerability in Exiv2 0.26: a heap-based buffer over-read in Image::printIFDStructure (image.cpp) can be triggered by crafted input, leading to remote denial of service. The CVE-2017-11336 entry is supported by multiple sources in the connected set, which describe the affect...

CVE-2017-11337

CVE-2017-11337 is an Exiv2 0.26 vulnerability: an invalid free in Action::TaskFactory::cleanup (actions.cpp) can be triggered by crafted input to cause a remote denial of service. Public records in the initial document describe the flaw, and connected advisories/plugins (e.g., openSUSE/SUSE NSS, ...

CVE-2017-11338

CVE-2017-11338 refers to an infinite loop in Exiv2 0.26’s Image::printIFDStructure (image.cpp) that could enable a remote denial of service via crafted input. Connected advisories (SUSE/openSUSE, Red Hat Nessus plugins, and ENISA entries) confirm this vulnerability is associated with Exiv2 0.26 a...

CVE-2017-11339

CVE-2017-11339 : Exiv2 0.26 contains a heap-based buffer overflow in the Image::printIFDStructure function (image.cpp) triggered by crafted input, leading to remote denial of service. Multiple open advisories (e.g., openSUSE/SUSE updates) fix this by upgrading to Exiv2 0.26 or applying patches. T...