SUSE CVE-2017-18238

An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .qt file...

Denial Of Service (DoS)

exempi is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp...

openSUSE Security Update : exempi (openSUSE-2018-1022)

This update for exempi fixes the following security issue : - CVE-2017-18236: The ASFSupport::ReadHeaderObject function allowed remote attackers to cause a denial of service infinite loop via a crafted .asf file bsc1085589 - CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed...

Exempi denial of service vulnerability

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in the 'TradQTManager::ParseCachedBoxes' function in the XMPFiles/source/FormatSupport/QuickTimeSupport.cpp file in versions of Exempi prior to 2.4.4. function has a security vulnerability. ...

DEBIAN-CVE-2017-18238

An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .qt file...

Code injection

An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service infinite loop via crafted XMP data in a .qt file...