PT-2017-13733
CVE-2017-14863
·
Published
2017-09-28
·
Updated
2019-10-03
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Exiv2 version 0.26
Description
A NULL pointer dereference was discovered in the
Exiv2::Image::printIFDStructure function in image.cpp, which causes a segmentation fault and application crash, leading to denial of service.Recommendations
For Exiv2 version 0.26, consider applying a patch or fix to resolve the NULL pointer dereference issue in the
Exiv2::Image::printIFDStructure function to prevent application crashes and denial of service.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾