PT-2019-11554 · Matthew Petroff+4 · Jhead+4
CVE-2019-1010301
·
Publicado
2019-07-15
·
Atualizado
2023-08-24
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
jhead version 3.03
Description:
The issue is related to a buffer overflow, which can cause a denial of service. The component affected is gpsinfo.c, specifically at Line 151 in the
ProcessGpsInfo() function. The attack vector involves opening a specially crafted JPEG file.Recommendations:
For jhead version 3.03, consider avoiding the use of the
ProcessGpsInfo() function until a patch is available. As a temporary workaround, restrict the opening of JPEG files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Suse
Ubuntu
Jhead