CVE-2017-17725

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from CVE-2017-14864, which is an invalid memory address dereference.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugzilla.redhat.com/show_bug.cgi?id=1525055Exploit, Issue Tracking, Third Party Advisory
https://github.com/Exiv2/exiv2/issues/188Exploit, Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1525055Exploit, Issue Tracking, Third Party Advisory
https://github.com/Exiv2/exiv2/issues/188Exploit, Issue Tracking

Timeline

Published: Feb 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-177278.8DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templ CVE-2017-17734.0IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform D CVE-2017-177309.8DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.CVE-2017-177319.8DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.CVE-2017-177339.8Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.CVE-2017-177349.8CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.CVE-2017-177359.8CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.CVE-2017-177369.8Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/insta CVE-2017-177376.1The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /sto CVE-2017-177387.5The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.CVE-2017-177399.8The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowi CVE-2017-17745.3IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used