CVE-2005-4676
Published Dec 31, 2005
Last updated 7 years ago
Overview
- Description
- Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote attackers to cause a denial of service (application crash) via images with crafted IPTC metadata.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5492976D-EBFF-4EDC-9611-091B6D3A7F1A"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70C8FF77-F6AD-4C69-8292-B0739BAF5B32"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96609D0C-73BD-4D5F-8A93-995A50CACA06"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99E6F95E-8AD8-4474-A63E-6231E9685174"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "089E024F-5B9B-4B0C-801D-C9CB3BE01B30"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1A9B864-8153-4492-908C-284D3C20AE79"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1A2B2A7-CA56-4884-8D22-0C1E2EBD4A04"
},
{
"criteria": "cpe:2.3:a:andreas_huggel:exiv2:0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE61F68E-FFC0-4DEB-BB32-0009740DB3AE"
}
],
"operator": "OR"
}
]
}
]