CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11336

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

CVE-2017-11337

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-11338

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

PT-2017-11936

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer over-read issue exists in the Image::printIFDStructure function in image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...

PT-2017-11938

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp. A crafted input can lead to a remote denial of service attack. Recommendations For Exiv2 version 0.26, consid...

PT-2017-11939

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description A heap-based buffer overflow exists in the Image::printIFDStructure function of image.cpp. This issue can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendations...

PT-2017-11937

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an invalid free in the Action::TaskFactory::cleanup function, which can be triggered by a crafted input. This can lead to a remote denial of service attack. Recommendations For Exiv2 versi...

PT-2017-11941

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a Segmentation fault in the XmpParser::terminate function, which can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendations For Exiv2...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

exiv2 'Image::printIFDStructure' Denial of Service Vulnerability

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata, providing fast and easy reading and writing of image metadata in a wide range of EXIF, IPTC and XMP formats. The Image::printIFDStructure security vulnerability in Exiv2 version 0.26. A remote attacker ca...

PYSEC-2017-142

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

Design/Logic Flaw

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

PYSEC-2017-142

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

CVE-2017-9953

CVE-2017-9953 affects Exiv2 (libexiv2). The issue is an invalid free in Image::printIFDStructure, causing a segmentation fault and a remote denial of service with crafted input in Exiv2 0.26. PTSecurity literature indicates fixes in Exiv2 0.27.2 and later; upgrade to 0.27.2+ (or later) to remedia...