Skip to content
OpenAdvisories
Unscored USN-3668-1 8 CVEs

exempi vulnerabilities

Published Jun 4, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exempi incorrectly handled certain media files. If a
user or automated system were tricked into opening a specially crafted
file, a remote attacker could cause Exempi to hang or crash, resulting in a
denial of service, or possibly execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS exempi 2.2.1-1ubuntu1.1
Ubuntu · 16.04 LTS 16.04:LTS exempi 2.2.2-2ubuntu0.1

Vulnerabilities 8

  • Unscored —
    CVE-2017-18233

    An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RI…

    exempi exempi Debian Ubuntu
  • Unscored —
    CVE-2017-18234

    An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy…

    exempi exempi Debian Ubuntu
  • Unscored —
    CVE-2017-18236

    An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSup…

    exempi exempi Debian Ubuntu
  • Unscored —
    CVE-2017-18238

    An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/Format…

    exempi exempi Debian Ubuntu
  • Unscored —
    CVE-2018-7728

    An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a case of a z…

    exempi exempi Debian Ubuntu
  • Unscored —
    CVE-2018-7729

    An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_MetaHandler:…

    exempi Debian
  • Unscored —
    CVE-2018-7730

    An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source…

    exempi exempi Debian Ubuntu
  • Unscored —
    CVE-2018-7731

    An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether …

    exempi Debian

References

  • report
    https://ubuntu.com/security/CVE-2017-18233
  • report
    https://ubuntu.com/security/CVE-2017-18234
  • report
    https://ubuntu.com/security/CVE-2017-18236
  • report
    https://ubuntu.com/security/CVE-2017-18238
  • report
    https://ubuntu.com/security/CVE-2018-7728
  • report
    https://ubuntu.com/security/CVE-2018-7729
  • report
    https://ubuntu.com/security/CVE-2018-7730
  • report
    https://ubuntu.com/security/CVE-2018-7731