Vulnerability Details : CVE-2012-2837
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.
Vulnerability category: Denial of service
Products affected by CVE-2012-2837
- cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*
- cpe:2.3:a:libexif_project:libexif:0.6.14:*:*:*:*:*:*:*
- cpe:2.3:a:libexif_project:libexif:0.6.15:*:*:*:*:*:*:*
- cpe:2.3:a:libexif_project:libexif:0.6.18:*:*:*:*:*:*:*
- cpe:2.3:a:libexif_project:libexif:0.6.16:*:*:*:*:*:*:*
- cpe:2.3:a:libexif_project:libexif:0.6.19:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2837
1.26%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 78 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2837
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2012-2837
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2837
-
http://www.debian.org/security/2012/dsa-2559
Debian -- Security Information -- DSA-2559-1 libexif
-
http://www.ubuntu.com/usn/USN-1513-1
USN-1513-1: libexif vulnerabilities | Ubuntu security notices
-
http://secunia.com/advisories/49988
Sign in
-
http://sourceforge.net/mailarchive/message.php?msg_id=29534027
EXIF Tag Parsing Library / [Libexif-devel] libexif project security advisory July 12, 2012
-
http://rhn.redhat.com/errata/RHSA-2012-1255.html
RHSA-2012:1255 - Security Advisory - Red Hat Customer Portal
-
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html
[security-announce] SUSE-SU-2012:0903-1: important: Security update for
-
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00014.html
[security-announce] SUSE-SU-2012:0902-1: important: Security update for
-
http://www.securityfocus.com/bid/54437
libexif Multiple Remote Vulnerabilities
Jump to