CVE-2014-9449: Buffer Overflow
Published Jan 2, 2015
·Updated
Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
Affected Software
2 affected components
exiv2 exiv2=0.24
fedoraproject fedora=21
Event History
Jan 2, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9449?
CVE-2014-9449 is rated as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2014-9449?
To fix CVE-2014-9449, you should upgrade Exiv2 to version 0.25 or later, which addresses this vulnerability.
3
What types of attacks does CVE-2014-9449 enable?
CVE-2014-9449 enables remote attackers to cause a denial of service by exploiting a buffer overflow.
4
Which versions of Exiv2 are affected by CVE-2014-9449?
Exiv2 version 0.24 is specifically affected by CVE-2014-9449.
5
Is Fedora 21 vulnerable to CVE-2014-9449?
Yes, Fedora 21 is vulnerable to CVE-2014-9449 when using Exiv2 version 0.24.