CVE

Id
56083  
CVE No.
CVE-2012-2840  
Status
Candidate  
Description
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.  
Phase
Assigned (20120519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
583118 56083 CVE-2012-2840 MLIST:[libexif-devel] 20120712 libexif project security advisory July 12, 2012  View
583119 56083 CVE-2012-2840 URL:http://sourceforge.net/mailarchive/message.php?msg_id=29534027  View
583120 56083 CVE-2012-2840 DEBIAN:DSA-2559  View
583121 56083 CVE-2012-2840 URL:http://www.debian.org/security/2012/dsa-2559  View
583122 56083 CVE-2012-2840 REDHAT:RHSA-2012:1255  View
583123 56083 CVE-2012-2840 URL:http://rhn.redhat.com/errata/RHSA-2012-1255.html  View
583124 56083 CVE-2012-2840 SUSE:SUSE-SU-2012:0903  View
583125 56083 CVE-2012-2840 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html  View
583126 56083 CVE-2012-2840 UBUNTU:USN-1513-1  View
583127 56083 CVE-2012-2840 URL:http://www.ubuntu.com/usn/USN-1513-1  View
583128 56083 CVE-2012-2840 BID:54437  View
583129 56083 CVE-2012-2840 URL:http://www.securityfocus.com/bid/54437  View
583130 56083 CVE-2012-2840 SECUNIA:49988  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27392 JVNDB-2012-003099 exif の libjpeg の jpeg-data.c 内の jpeg_data_load_data 関数における整数オーバーフローの脆弱性 exif の libjpeg の jpeg-data.c 内の jpeg_data_load_data 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2012-2845 56083 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003099.html  View