SUSE CVE-2017-17725

In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864,...

The vulnerability of the Exiv2::getULong function in types.cpp of the Exiv2 metadata management library, which is related to the operation returning values within the allowable buffer size, allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::getULong function in the types.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2017-17725

CVE-2017-17725 : In Exiv2 0.26, an integer overflow in Exiv2::getULong (types.cpp) causes a heap-based buffer over-read. This can be leveraged remotely to trigger a denial of service via a crafted image file. The description indicates a DoS impact but does not provide exploit details beyond the o...