Published: 15/03/2018 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

An issue exists in Exempi prior to 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote malicious users to cause a denial of service (infinite loop) via crafted XMP data in a .avi file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
exempi project exempi
debian debian linux 7.0
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 17.10

Synopsis Low: exempi security update Type/Severity Security Advisory: Low Topic An update for exempi is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, which gives a detai ...

Exempi could be made to crash or run programs if it opened a specially crafted file ...

An issue was discovered in Exempi before 244 Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFFcpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a avi file(CVE-2017-18233) An issue was discovered in Exempi before 243 It allows remote attackers to cause a denial of servic ...

An issue was discovered in Exempi before 244 Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFFcpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a avi file ...

CWE-190 CWE-835 https://cgit.freedesktop.org/exempi/commit/?id=65a8492832b7335ffabd01f5f64d89dec757c260 https://bugs.freedesktop.org/show_bug.cgi?id=102151 https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html https://usn.ubuntu.com/3668-1/https://access.redhat.com/errata/RHSA-2019:2048 https://access.redhat.com/errata/RHSA-2019:2048 https://usn.ubuntu.com/3668-1/https://nvd.nist.gov

CVE-2017-18233

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect