CVE-2012-2840 in libexif
Summary
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/19/2012
Disclosure
07/13/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61281 | Curtis Galloway libexif exif-entry.c exif_convert_utf16_to_utf8 numeric error | 189 | Not defined | Official fix | CVE-2012-2840 |