SB2018020207 - Denial of service in Exempi

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Improper input validation (CVE-ID: CVE-2017-18235)

The vulnerability allows a remote unauthenticated attacker to cause DoS condition on the target system.

The weakness exists in the VPXChunk class defined in the source code file XMPFiles/source/FormatSupport/WEBP_Support.cpp due to insufficient sanitization of "0" values passed to height() or width() by the affected software when handling .webq files. A remote attacker can trick the victim into opening a specially crafted .webq file, trigger memory assertion error and cause the service to crash.

2) Infinite loop (CVE-ID: CVE-2017-18236)

The vulnerability allows a remote unauthenticated attacker to cause DoS condition on the target system.

The weakness exists in the ASF_Support::ReadHeaderObject function in the source code file XMPFiles/source/FormatSupport/ASF_Support.cpp due to infinite loop when handling .asf files. A remote attacker can trick the victim into accessing a specially crafted .asf file and cause the service to crash.

Remediation

Install update from vendor's website.

References

• https://cgit.freedesktop.org/exempi/commit/?id=9e76a7782a54a242f18d609e7ba32bf1c430a5e4
• https://cgit.freedesktop.org/exempi/commit/?id=fe59605d3520bf2ca4e0a963d194f10e9fee5806