Non évaluée
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remo...
CVE-2017-17724
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.
Références
- advisory access.redhat.com
- advisory security.gentoo.org
- report bugzilla.redhat.com
- report github.com
- web github.com