Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqcm-gr77-6gqg

Опубликовано: 22 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

EPSS

Процентиль: 27%
0.00096
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 6.3
ubuntu
почти 2 года назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

CVSS3: 6.5
redhat
почти 2 года назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

CVSS3: 6.3
nvd
почти 2 года назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified as critical. This issue affects the function PrintFormatNumber of the file exif.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257711.

CVSS3: 6.3
debian
почти 2 года назад

A vulnerability was found in Matthias-Wandel jhead 3.08 and classified ...

EPSS

Процентиль: 27%
0.00096
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-122