CVE-2019-25553

EUVD-2019-19854
CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash through the import functionality during the image processing workflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Affected Products (NVD)
VendorProductVersion
cewephoto_importer
6.4.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://cewe-photoworld.com/
https://www.exploit-db.com/exploits/46862
https://www.vulncheck.com/advisories/cewe-photo-importer-denial-of-service-via-malformed-image