CVE-2012-2814

libexif 0.6.20 - Buffer Overflow in EXIF Tag Parsing

Title source: llm

Description

Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

References (9)

Core 9

Core References

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2012-1255.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/54437

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2012/dsa-2559

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html

Product mailing-list x_refsource_mlist

http://sourceforge.net/mailarchive/message.php?msg_id=29534027

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/49988

Vendor Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1513-1

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html

Scores

EPSS 0.0756

EPSS Percentile 93.8%

Details

CWE

CWE-119

Status published

Products (1)

libexif_project/libexif 0.6.20

Published Jul 13, 2012

Tracked Since Feb 18, 2026