CVE-2012-2837
Last modified
CVE-2012-2837 is a vulnerability of currently unknown severity. The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.. EPSS estimates a 3.86% chance of exploitation in the next 30 days.
Description
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Libexif Project | Libexif | <= 0.6.20 |
| Libexif Project | Libexif | 0.6.14 |
| Libexif Project | Libexif | 0.6.15 |
| Libexif Project | Libexif | 0.6.16 |
| Libexif Project | Libexif | 0.6.18 |
| Libexif Project | Libexif | 0.6.19 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-2837?
How severe is CVE-2012-2837?
How do I fix CVE-2012-2837?
Are you affected by CVE-2012-2837?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST