Exiv riffvideo.cpp Buffer Overflow Vulnerability

Exiv2 is a C++ class library for extracting EXIF, LPTC and XMP metadata information from images. A buffer overflow vulnerability in the RiffVideo::infoTagsHandler function in Exiv2 riffvideo.cpp allows an attacker to construct an AVI file containing extra-long IKEY INFO tagged values, tricking th...