In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file.
References
Link | Resource |
---|---|
https://github.com/Exiv2/exiv2/issues/216 | Exploit Issue Tracking Third Party Advisory |
http://www.securityfocus.com/bid/102789 | Third Party Advisory VDB Entry |
https://security.gentoo.org/glsa/201811-14 | Third Party Advisory |
Configurations
Information
Published : 2018-01-17 23:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-5772
Mitre link : CVE-2018-5772
JSON object : View
CWE
CWE-674
Uncontrolled Recursion
Products Affected
exiv2
- exiv2