tocsin

Debian/exiv2: unknown

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

Action: Upgrade exiv2 to 0.24-4.1 or later.

Affected

introducedfixedlast affected
00.24-4.1-

Fixed versions

0.24-4.1

Sources

published · modified · JSON