Описание
The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:openexif_project:openexif:2.1.4:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00258
Низкий
5.5 Medium
CVSS3
7.1 High
CVSS2
Дефекты
CWE-835
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file.
EPSS
Процентиль: 49%
0.00258
Низкий
5.5 Medium
CVSS3
7.1 High
CVSS2
Дефекты
CWE-835