PT-2007-7513 · Exiv2 · Exiv2
CVE-2007-6353
·
Publicado
1970-01-01
·
Atualizado
2024-07-19
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
exiv2 library (affected versions not specified)
Description
The issue is related to an integer overflow in the exif.cpp file of the exiv2 library, which allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Exiv2