Unrated
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remo...
CVE-2017-17724
First seen on SecPulse
Original description The description as published by the source.
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.
References
- advisory access.redhat.com
- advisory security.gentoo.org
- report bugzilla.redhat.com
- report github.com
- web github.com