CVE:CVE-2005-4676
CNNVD:CNNVD-200512-868
Andreas Huggel Exiv2的0.9之前版本中存在缓冲区溢出，在调用sscanf函数之前未置空终止符，远程攻击者可通过带有特制IPTC元数据的图像来发起拒绝服务攻击(应用程序崩溃)。
solution:Upgrade andreas_huggel exiv2 to a higher version than 0.3,0.4,0.5,0.6,0.6.1,0.6.2,0.7,0.8,and avoid the version 0.3,0.4,0.5,0.6,0.6.1,0.6.2,0.7,0.8