Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqcm-gr77-6gqg

Опубликовано: 22 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

EPSS

Процентиль: 52%
0.00734
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 6.3
ubuntu
больше 2 лет назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

CVSS3: 6.5
redhat
больше 2 лет назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

CVSS3: 6.3
nvd
больше 2 лет назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

CVSS3: 6.3
debian
больше 2 лет назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified ...

EPSS

Процентиль: 52%
0.00734
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-122