PT-2019-13570 · Drewnoakes · Metadata-Extractor

Publicado 2019-07-25 · Atualizado 2020-03-20 · CVE-2019-14262

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MetadataExtractor version 2.1.0

Description The issue allows stack consumption.

Recommendations For MetadataExtractor version 2.1.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2019-14262

GHSA-CWQQ-W8C3-R2JW

Produtos afetados

Metadata-Extractor

Referências · 6

• https://github.com/drewnoakes/metadata-extractor-dotnet/pull/190 · Correção
• https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E · Nota
• https://osv.dev/vulnerability/GHSA-cwqq-w8c3-r2jw · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-14262 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14262 · Nota de Segurança