CVE

Id
56084  
CVE No.
CVE-2012-2841  
Status
Candidate  
Description
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-size parameter during the formatting of an EXIF tag, leading to a heap-based buffer overflow.  
Phase
Assigned (20120519)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
583131 56084 CVE-2012-2841 MLIST:[libexif-devel] 20120712 libexif project security advisory July 12, 2012  View
583132 56084 CVE-2012-2841 URL:http://sourceforge.net/mailarchive/message.php?msg_id=29534027  View
583133 56084 CVE-2012-2841 DEBIAN:DSA-2559  View
583134 56084 CVE-2012-2841 URL:http://www.debian.org/security/2012/dsa-2559  View
583135 56084 CVE-2012-2841 REDHAT:RHSA-2012:1255  View
583136 56084 CVE-2012-2841 URL:http://rhn.redhat.com/errata/RHSA-2012-1255.html  View
583137 56084 CVE-2012-2841 SUSE:SUSE-SU-2012:0902  View
583138 56084 CVE-2012-2841 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html  View
583139 56084 CVE-2012-2841 SUSE:SUSE-SU-2012:0903  View
583140 56084 CVE-2012-2841 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html  View
583141 56084 CVE-2012-2841 UBUNTU:USN-1513-1  View
583142 56084 CVE-2012-2841 URL:http://www.ubuntu.com/usn/USN-1513-1  View
583143 56084 CVE-2012-2841 BID:54437  View
583144 56084 CVE-2012-2841 URL:http://www.securityfocus.com/bid/54437  View
583145 56084 CVE-2012-2841 SECUNIA:49988  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27737 JVNDB-2012-003444 Linux 上で稼働する Google Chrome におけるサービス運用妨害 (クロスプロセス干渉) の脆弱性 Linux 上で稼働する Google Chrome は、レンダラープロセスを適切に分離しないため、サービス運用妨害 (クロスプロセス干渉) 状態となる脆弱性が存在します。 CVE-2012-2846 56084 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003444.html  View