CVE-2008-2696 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-2696
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2696

Description: Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42885 UBUNTU http://www.ubuntu.com/usn/usn-655-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00012.html SAID Secunia Advisory: SA30519 Secunia Advisory: SA32273 MISC http://dev.robotbattle.com/bugs/view.php?id=0000546 http://bugzilla.gnome.org/show_bug.cgi?id=524715 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:119 CONFIRM http://www.exiv2.org/changelog.html BID 29586

Return to the previous page.