Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Ch Rover

#41054de 53,632
6.5CVSS total
Vulnerabilidades · 1
PT-2017-18798
6.5
2017-05-26
Exiv2 · Exiv2 · CVE-2017-9239
**Name of the Vulnerable Software and Affected Versions** Exiv2 version 0.26 **Description** An issue in the handling of the ifd structure can lead to a segmentation fault when a crafted tiff file is opened, potentially causing the program to crash. The issue arises when the data structure of the ifd is incorrect, resulting in the assignment of pValue to 0x0, and subsequently, the value of pValue() is 0x0. This value is then used by TiffImageEntry::doWriteImage, leading to the segmentation fault. **Recommendations** For Exiv2 version 0.26, consider avoiding the use of crafted tiff files until a patch is available. As a temporary workaround, restrict the opening of tiff files from untrusted sources to minimize the risk of exploitation.