CVEvulnerability

CVE-2005-4676

5.0 MEDIUM Published 2005-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata.

Affected configurations

• andreas huggel exiv2 0.3 • andreas huggel exiv2 0.4 • andreas huggel exiv2 0.5 • andreas huggel exiv2 0.6 • andreas huggel exiv2 0.6.1 • andreas huggel exiv2 0.6.2 • andreas huggel exiv2 0.7 • andreas huggel exiv2 0.8

References