CVE-2012-2837

Publication date 13 July 2012

Last updated 24 July 2024

Description

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libexif	12.04 LTS precise	Fixed 0.6.20-2ubuntu0.1
	11.10 oneiric	Fixed 0.6.20-1ubuntu0.1
	11.04 natty	Fixed 0.6.20-0ubuntu1.1
	10.04 LTS lucid	Fixed 0.6.19-1ubuntu0.1
	8.04 LTS hardy	Fixed 0.6.16-2.1ubuntu0.2

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libexif	Vendor: https://bugzilla.novell.com/attachment.cgi?id=498460 Upstream: http://libexif.cvs.sourceforge.net/viewvc/libexif/libexif/libexif/olympus/mnote-olympus-entry.c?r1=1.54&r2=1.55&view=patch

References

Related Ubuntu Security Notices (USN)

USN-1513-1
libexif vulnerabilities
23 July 2012