EUVD-2017-2755

Malware in sbrugna...

EUVD-2017-2753

Malware in sbrugna...

Code injection

The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted jpg file...

CVE-2017-11115

The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted jpg file...

Heap overflow

The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...

CVE-2017-11118

The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted jpg file...

CVE-2017-11116

OpenExif 2.1.4 is affected by a denial of service in the ExifImageFileRead.cpp function readDQT. A crafted JPEG can trigger a heap-based buffer over-read, causing application crash. This is the documented root cause and impact across multiple sources (NVD/NVDo, CNVD, CVE listings). There is no ex...

CVE-2017-11115

The CVE-2017-11115 entry details a DoS vulnerability in OpenExif 2.1.4, specifically in ExifJpegHUFFTable::deriveTable within ExifHuffmanTable.cpp. A crafted JPEG can trigger a heap-based buffer overflow, causing application crash. Multiple sources (NVD, CNVD/CVELIST, PRION) confirm the affected ...

CVE-2017-11115

The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash via a crafted jpg file...