CVE-2017-9239
1 advisory.
PyPI/exiv2 CVE-2017-9239: medium 6.5
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage wil
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2017-112
- http://dev.exiv2.org/issues/1295
- http://www.securityfocus.com/bid/98720
- https://usn.ubuntu.com/3852-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
- https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29
CVE-2017-9239 · published · modified · JSON