Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Ch Rover

#44281de 56,330
6.5CVSS total
Vulnerabilidades · 1
PT-2017-18798
6.5
2017-05-26
Exiv2 · Exiv2 · CVE-2017-9239
**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.26 **Description** An issue in the handling of the ifd structure can lead to a segmentation fault when a crafted tiff file is opened, potentially causing the program to crash. The issue arises when the data structure of the ifd is incorrect, resulting in the assignment of pValue to 0x0, and subsequently, the value of pValue() is 0x0. This value is then used by TiffImageEntry::doWriteImage, leading to the segmentation fault. **Recommendations** For Exiv2 version 0.26, consider avoiding the use of crafted tiff files until a patch is available. As a temporary workaround, restrict the opening of tiff files from untrusted sources to minimize the risk of exploitation.