Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Ch Rover

#44520of 56,333
6.5Total CVSS
Vulnerabilities · 1
PT-2017-18798
6.5
2017-05-26
Exiv2 · Exiv2 · CVE-2017-9239
**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.26 **Description** An issue in the handling of the ifd structure can lead to a segmentation fault when a crafted tiff file is opened, potentially causing the program to crash. The issue arises when the data structure of the ifd is incorrect, resulting in the assignment of pValue to 0x0, and subsequently, the value of pValue() is 0x0. This value is then used by TiffImageEntry::doWriteImage, leading to the segmentation fault. **Recommendations** For Exiv2 version 0.26, consider avoiding the use of crafted tiff files until a patch is available. As a temporary workaround, restrict the opening of tiff files from untrusted sources to minimize the risk of exploitation.