PT-2019-13570 · Drewnoakes · Metadata-Extractor

Published 2019-07-25 · Updated 2020-03-20 · CVE-2019-14262

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MetadataExtractor version 2.1.0

Description The issue allows stack consumption.

Recommendations For MetadataExtractor version 2.1.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2019-14262

GHSA-CWQQ-W8C3-R2JW

Affected Products

Metadata-Extractor

References · 6

• https://github.com/drewnoakes/metadata-extractor-dotnet/pull/190 · Patch
• https://osv.dev/vulnerability/GHSA-cwqq-w8c3-r2jw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14262 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14262 · Security Note
• https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E · Note
• https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E · Note