EUVD-2017-0042

Malware in sbrugna...

Heap-based Buffer Overflow

libexiv2.so is vulnerable to heap based buffer overflow. The vulnerability is due to the userDataDecoder function in quicktimevideo.cpp, where an attacker can remotely cause a buffer overflow...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer overflow in Exiv2::Internal::CrwMap::encode allows an attacker to cause an application crash...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. A malicious user can crash the applicaiton by passing a file to the tEXtToDataBuf function in pngimage.cpp...