7.5
CVE-2012-2840
- EPSS 5.02%
- Veröffentlicht 13.07.2012 10:34:59
- Zuletzt bearbeitet 16.06.2026 23:42:11
- Erkennungen
LoginOff-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libexif Project ≫ Libexif Version <= 0.6.20
Libexif Project ≫ Libexif Version 0.6.14
Libexif Project ≫ Libexif Version 0.6.15
Libexif Project ≫ Libexif Version 0.6.16
Libexif Project ≫ Libexif Version 0.6.18
Libexif Project ≫ Libexif Version 0.6.19
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.02% | 0.911 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00015.html
http://rhn.redhat.com/errata/RHSA-2012-1255.html
http://secunia.com/advisories/49988
http://sourceforge.net/mailarchive/message.php?msg_id=29534027
http://www.debian.org/security/2012/dsa-2559
http://www.securityfocus.com/bid/54437
http://www.ubuntu.com/usn/USN-1513-1