Browse CVEs

HIGH 8.8 CVE-2017-12955 There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructur… Exiv2 Mitigation only Fix from $1,9502017-08-18 MEDIUM 6.5 CVE-2017-12956 There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of se… Exiv2 Mitigation only Fix from $1,6002017-08-18 MEDIUM 6.5 CVE-2017-12957 There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to rem… Exiv2 Mitigation only Fix from $1,6002017-08-18 HIGH 7.5 CVE-2017-11592 There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of… Exiv2 No fix yet Fix from $1,9502017-07-24 HIGH 7.5 CVE-2017-11553 There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of s… Exiv2 No fix yet Fix from $1,9502017-07-23 MEDIUM 6.5 CVE-2017-11336 There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote den… Exiv2 Mitigation only Fix from $1,6002017-07-17 MEDIUM 6.5 CVE-2017-11337 There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of s… Exiv2 Mitigation only Fix from $1,6002017-07-17 MEDIUM 6.5 CVE-2017-11338 There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of… Exiv2 Mitigation only Fix from $1,6002017-07-17 MEDIUM 6.5 CVE-2017-11339 There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote deni… Exiv2 Mitigation only Fix from $1,6002017-07-17 MEDIUM 6.5 CVE-2017-11340 There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote de… Exiv2 Mitigation only Fix from $1,6002017-07-17