CVE-2012-2836
Published: 13 July 2012
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
libexif
Launchpad, Ubuntu, Debian |
hardy |
Released
(0.6.16-2.1ubuntu0.2)
|
| lucid |
Released
(0.6.19-1ubuntu0.1)
|
|
| natty |
Released
(0.6.20-0ubuntu1.1)
|
|
| oneiric |
Released
(0.6.20-1ubuntu0.1)
|
|
| precise |
Released
(0.6.20-2ubuntu0.1)
|
|
| upstream |
Released
(0.6.20-3,0.6.21)
|
|
|
Patches:
vendor: https://bugzilla.novell.com/attachment.cgi?id=498458 vendor: https://bugzilla.novell.com/attachment.cgi?id=498459 upstream: http://libexif.cvs.sourceforge.net/viewvc/libexif/libexif/libexif/exif-data.c?r1=1.129&r2=1.131&view=patch |
||