CVE - CVE-2012-2836

CVE-ID
CVE-2012-2836	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:54437 URL:http://www.securityfocus.com/bid/54437 DEBIAN:DSA-2559 URL:http://www.debian.org/security/2012/dsa-2559 MLIST:[libexif-devel] 20120712 libexif project security advisory July 12, 2012 URL:http://sourceforge.net/mailarchive/message.php?msg_id=29534027 REDHAT:RHSA-2012:1255 URL:http://rhn.redhat.com/errata/RHSA-2012-1255.html SECUNIA:49988 URL:http://secunia.com/advisories/49988 SUSE:SUSE-SU-2012:0902 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html SUSE:SUSE-SU-2012:0903 URL:http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html UBUNTU:USN-1513-1 URL:http://www.ubuntu.com/usn/USN-1513-1
Assigning CNA
Chrome
Date Record Created
20120519	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120519)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)