CVE-2017-9239 - CVE House
Back to Database
Status published Medium CVE-2017-9239

An issue was discovered in Exiv2 0.26. When the data...

Vulnerability Description

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9239

Credits & Attribution

No credits recorded in the NVD database.

References

More from exiv2

View All →
CVE-2021-31292
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers...
High 7.5
CVE-2020-19716
A buffer overflow vulnerability in the Databuf function in types.cpp...
Medium 6.5
CVE-2020-18899
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27...
Unknown 0
CVE-2020-18898
A stack exhaustion issue in the printIFDStructure function of Exiv2...
Medium 6.5
CVE-2020-18831
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2...
High 7.8

Affected Vendor

Affected Software

exiv2, ubuntu linux
Vulnerable Versions:
0.26, 14.04, 16.04, 18.04, 18.10

Timeline

Official Publish: May 26th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.