Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.8
CVSSv3

CVE-2017-18234

Published: 15/03/2018 Updated: 06/08/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Exempi Project

Vulnerability Summary

An issue exists in Exempi prior to 2.4.3. It allows remote malicious users to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp, and XMPFiles/source/FormatSupport/TIFF_Support.hpp.

Vulnerable Product Search on Vulmon Subscribe to Product

exempi project exempi

debian debian linux 7.0

canonical ubuntu linux 14.04

canonical ubuntu linux 16.04

canonical ubuntu linux 17.10

Vendor Advisories

Red Hat: Low: exempi security update
Synopsis Low: exempi security update Type/Severity Security Advisory: Low Topic An update for exempi is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base score, which gives a detai ...
Ubuntu Security Notice: exempi vulnerabilities
Exempi could be made to crash or run programs if it opened a specially crafted file ...
Amazon Linux 2: ALAS2-2019-1321
An issue was discovered in Exempi before 244 Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFFcpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a avi file(CVE-2017-18233) An issue was discovered in Exempi before 243 It allows remote attackers to cause a denial of servic ...

References

CWE-416https://cgit.freedesktop.org/exempi/commit/?id=c26d5beb60a5a85f76259f50ed3e08c8169b0a0chttps://bugs.freedesktop.org/show_bug.cgi?id=100397https://lists.debian.org/debian-lts-announce/2018/03/msg00013.htmlhttps://usn.ubuntu.com/3668-1/https://access.redhat.com/errata/RHSA-2019:2048https://access.redhat.com/errata/RHSA-2019:2048https://usn.ubuntu.com/3668-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook