CVSS: 5.0EPSS: 2%CPEs: 2EXPL: 0CVE-2014-9449
https://notcve.org/view.php?id=CVE-2014-9449
Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file. Desbordamiento de buffer en la función RiffVideo::infoTagsHandler en riffvideo.cpp en Exiv2 0.24 permite a atacantes remotos causar una denegación servicio (caída) a través de un valor del indicador IKEY INFO largo en un fichero AVI. • http://dev.exiv2.org/issues/960 http://dev.exiv2.org/projects/exiv2/repository/diff?rev=3264&rev_to=3263 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148382.html http://secunia.com/advisories/61801 http://www.securityfocus.com/bid/71912 http://www.ubuntu.com/usn/USN-2454-1 https://security.gentoo.org/glsa/201507-03 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 1%CPEs: 1EXPL: 1CVE-2008-2696
https://notcve.org/view.php?id=CVE-2008-2696
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function. Exiv2 0.16 permite a atacantes remotos asistidos por el usuario provocar una denegación de servicio (división por cero y caída de aplicación) a través de un valor 0 en Nikon lens information en los metadatos de una imagen, relacionada con "pretty printing" y la funcion RationalValue::toLong. • http://bugzilla.gnome.org/show_bug.cgi?id=524715 http://dev.robotbattle.com/bugs/view.php?id=0000546 http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html http://secunia.com/advisories/30519 http://secunia.com/advisories/32273 http://www.exiv2.org/changelog.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:119 http://www.securityfocus.com/bid/29586 http://www.ubuntu.com/usn/usn-655-1 http://www.vupen.com/english/advisories/2008/1766&#x • CWE-189: Numeric Errors •
CVSS: 7.5EPSS: 1%CPEs: 6EXPL: 0CVE-2007-6353
https://notcve.org/view.php?id=CVE-2007-6353
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. Desbordamiento de búfer en exif.cpp en la libreria exiv2 permite a atacantes dependientes del contexto ejecutar código de su elección a través de archivos EXIF manipulados que disparan un desbordamiento de búfer basado en pila. • http://bugs.gentoo.org/show_bug.cgi?id=202351 http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html http://secunia.com/advisories/28132 http://secunia.com/advisories/28178 http://secunia.com/advisories/28267 http://secunia.com/advisories/28412 http://secunia.com/advisories/28610 http://secunia.com/advisories/32273 http://security.gentoo.org/glsa/glsa-200712-16.xml http://www.debian.org/security/2008/dsa-1474 http://www.mandriva.com/security/advisories • CWE-190: Integer Overflow or Wraparound •
CVSS: 5.0EPSS: 6%CPEs: 8EXPL: 2CVE-2005-4676 – Exiv2 - Corrupted EXIF Data Denial of Service
https://notcve.org/view.php?id=CVE-2005-4676
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata. • https://www.exploit-db.com/exploits/27140 http://dev.robotbattle.com/mantis/bug_view_advanced_page.php?bug_id=447 http://home.arcor.de/ahuggel/exiv2/changelog.html http://secunia.com/advisories/18619 http://www.securityfocus.com/bid/16400 http://www.vupen.com/english/advisories/2006/0345 https://exchange.xforce.ibmcloud.com/vulnerabilities/24349 •