CVE-2008-2696
Fixed in a distro release EPSS 2%
Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and application crash) via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function.
Products: exiv2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | exiv2 | 0.17-1 |
| Debian 13 | exiv2 | 0.17-1 |
| Debian 14 | exiv2 | 0.17-1 |