There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1465061 | Exploit Issue Tracking Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-06-26 16:29
Updated : 2017-06-30 09:11
NVD link : CVE-2017-9953
Mitre link : CVE-2017-9953
JSON object : View
CWE
CWE-416
Use After Free
Products Affected
exiv2
- exiv2
redhat
- enterprise_linux