Lucene search

K
osvGoogleOSV:USN-4987-2
HistoryFeb 08, 2022 - 9:24 p.m.

libimage-exiftool-perl vulnerability

2022-02-0821:24:13
Google
osv.dev
13
exiftool
ubuntu 16.04 esm
djvu file format
dos
arbitrary code
vulnerability

AI Score

7.7

Confidence

High

EPSS

0.967

Percentile

99.7%

USN-4987-1 fixed a vulnerability in ExifTool. This update provides
the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that ExifTool did not properly sanitize user data for the
DjVu file format. An attacker could use this vulnerability to cause a DoS or
possibly execute arbitrary code.