MEDIUM6.5

PYSEC-2017-112

Details

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/exiv2

Introduced in: 0

No fixed version published yet for exiv2 (pip). Pin to a known-safe version or switch to an alternative.

References

http://dev.exiv2.org/issues/1295[REPORT]
http://www.securityfocus.com/bid/98720[ADVISORY]
https://usn.ubuntu.com/3852-1/[WEB]
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html[WEB]
https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29[WEB]