Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp (CVE-2018-12265)

  - Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote     attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    (CVE-2014-9449)

  - exiv2 0.26 contains a Stack out of bounds read in webp parser (CVE-2017-1000126)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - exiv2: Heap-based buffer overflow in basicio.cpp (CVE-2017-12955)

  - Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote     attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    (CVE-2014-9449)

  - exiv2 0.26 contains a Stack out of bounds read in webp parser (CVE-2017-1000126)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201507-03 (Exiv2: Denial of Service)

    Exiv2 has a buffer overflow in the RiffVideo::infoTagsHandler function       in riffvideo.cpp.
  Impact :

    A remote attacker could possibly cause a Denial of Service condition via       a specially crafted AVI file with IKEY INFO tag.
  Workaround :

    There is no known workaround at this time.

Security fix for CVE-2014-9449

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Exiv2 incorrectly handled certain tag values in video files. If a user or automated system were tricked into opening a specially crafted video file, a remote attacker could cause Exiv2 to crash, resulting in a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199672	RHEL 6 : exiv2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199570	RHEL 7 : exiv2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
84602	GLSA-201507-03 : Exiv2: Denial of Service	Nessus	Gentoo Local Security Checks	medium
80892	Fedora 21 : exiv2-0.24-4.fc21 (2015-0301)	Nessus	Fedora Local Security Checks	medium
80412	Ubuntu 14.10 : exiv2 vulnerability (USN-2454-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2014-9449

critical

Tenable Plugins

high

high

medium

medium

medium