CVE-2014-9449

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

Date published : 2015-01-02

http://www.securityfocus.com/bid/71912

http://dev.exiv2.org/issues/960