CVE-2017-9239: Divide by Zero
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9239?
CVE-2017-9239 is categorized as a high-severity vulnerability due to the potential for segmentation faults leading to application crashes.
How do I fix CVE-2017-9239?
To fix CVE-2017-9239, upgrade Exiv2 to version 0.27.3-3+deb11u2 or later if you are using Debian, or update to the appropriate versions specified for Ubuntu.
Which software packages are affected by CVE-2017-9239?
CVE-2017-9239 affects Exiv2 versions up to 0.26, as well as specific Ubuntu and Debian package versions listed in the vulnerability details.
What type of vulnerability is CVE-2017-9239?
CVE-2017-9239 is a segmentation fault vulnerability caused by the mishandling of data structures in the Exiv2 library.
Can CVE-2017-9239 be exploited remotely?
CVE-2017-9239 could potentially be exploited remotely if an attacker is able to manipulate the inputs to the Exiv2 library.