Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2017-9239 →
DEBIAN-CVE-2017-9239
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
exiv2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1"}]}]
Debian:13
exiv2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1"}]}]
Debian:14
exiv2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-3.1"}]}]
Références
- advisory security-tracker.debian.org