Security Advisory

CVE-2017-17724

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-02-12 22:00:00
Last updated 2024-08-05 20:59:17
Assigner mitre
State PUBLISHED

Description

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.