medium5.0Public exploit code
CVE-2005-4676
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Exiv2 - Corrupted EXIF Data Denial of Service2006-01-26 · dos · multiple · Verified
Impact
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andreas Huggel | Exiv2 | Versions 0.3, 0.4, 0.5, 0.6, 0.6.1, 0.6.2 |
References
- NVD record
- CVE.org record
- http://dev.robotbattle.com/mantis/bug_view_advanced_page.php?bug_id=447
- http://home.arcor.de/ahuggel/exiv2/changelog.html
- http://secunia.com/advisories/18619
- http://www.securityfocus.com/bid/16400
- http://www.vupen.com/english/advisories/2006/0345
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24349
- http://dev.robotbattle.com/mantis/bug_view_advanced_page.php?bug_id=447
- http://home.arcor.de/ahuggel/exiv2/changelog.html
- http://secunia.com/advisories/18619
- http://www.securityfocus.com/bid/16400
- http://www.vupen.com/english/advisories/2006/0345
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24349