CVE-2017-9239

MEDIUM Year: 2017
CVSS v3 Score
6.5
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-369
View all →

Vulnerability Description

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.

Related Vulnerabilities

CVE-2014-8130

MEDIUM
CVSS:6.5(Medium)

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a craft...

CWE-3692014

CVE-2015-7513

MEDIUM
CVSS:6.5(Medium)

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and hos...

CWE-3692015

CVE-2015-8504

MEDIUM
CVSS:6.5(Medium)

Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.

CWE-3692015

CVE-2016-10506

MEDIUM
CVSS:6.5(Medium)

Division-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c in OpenJPEG before 2.2.0 allow remote attackers to cause a denial of service (applica...

CWE-3692016

CVE-2016-3622

MEDIUM
CVSS:6.5(Medium)

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

CWE-3692016

CVE-2016-7530

MEDIUM
CVSS:6.5(Medium)

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.

CWE-3692016