CVE-2017-17723 in Exiv2info

Summary

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsible

Reservation

12/17/2017

Disclosure

02/12/2018

Entries

VDB-113169

CPE

ready

CVSS

7.7

EPSS

0.00610

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2017-17723
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2017-17723
CVE Detailshttps://www.cvedetails.com/cve/CVE-2017-17723/

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!