Lucene search
+L

2 matches found

CNVD
CNVD
added 2017/07/17 12:0 a.m.28 views

Exiv2 'Image::printIFDStructure' heap buffer overflow vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. The Image::printIFDStructure function in Exiv2's image.cpp suffers from a heap buffer overflow that allows an attacker to conduct a remote denial-of-service attack with specially designed inputs...

6.5CVSS7.5AI score0.01149EPSS
SaveExploits0References1
PyPA
PyPA
added 2017/06/26 11:29 p.m.9 views

PYSEC-2017-142

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack...

7.5CVSS7AI score0.02808EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder