Lucene search

K
cveMitreCVE-2008-2696
HistoryJun 13, 2008 - 7:41 p.m.

CVE-2008-2696

2008-06-1319:41:00
CWE-189
mitre
web.nvd.nist.gov
24
exiv2
denial of service
cve-2008-2696
metadata
image
security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.018

Percentile

88.2%

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to “pretty printing” and the RationalValue::toLong function.

Affected configurations

Nvd
Node
exiv2exiv2Match0.16
VendorProductVersionCPE
exiv2exiv20.16cpe:2.3:a:exiv2:exiv2:0.16:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

Low

EPSS

0.018

Percentile

88.2%