PT-2018-3938 · Exiv2+1 · Exiv2+1

Xiaoqx

·

Publicado

2017-05-08

·

Atualizado

2019-02-27

·

CVE-2018-9144

CVSS v2.0

9.4

Alta

VetorAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26
Description The issue is related to an out-of-bounds read in the Exiv2::Internal::binaryToString function in image.cpp. This could result in denial of service or information disclosure. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service.
Recommendations For Exiv2 version 0.26, consider restricting access to the image.cpp component until a patch is available. As a temporary workaround, avoid using the Exiv2::Internal::binaryToString function in image.cpp to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-1574
BDU:2023-05470
CVE-2018-9144

Produtos afetados

Alt Linux
Exiv2