Lucene search

K
suseSuseOPENSUSE-SU-2018:2764-1
HistorySep 20, 2018 - 12:15 p.m.

Security update for exempi (low)

2018-09-2012:15:48
lists.opensuse.org
26

0.004 Low

EPSS

Percentile

74.4%

This update for exempi fixes the following security issue:

  • CVE-2017-18236: The ASF_Support::ReadHeaderObject function allowed
    remote attackers to cause a denial of service (infinite loop) via a
    crafted .asf file (bsc#1085589)
  • CVE-2017-18233: Prevent integer overflow in the Chunk class that allowed
    remote attackers to cause a denial of service (infinite loop) via
    crafted XMP data in a .avi file (bsc#1085584)
  • CVE-2017-18238: The TradQT_Manager::ParseCachedBoxes function allowed
    remote attackers to cause a denial of service (infinite loop) via
    crafted XMP data in a .qt file (bsc#1085583)