Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-2813

Опубликовано: 13 июл. 2012
Источник: nvd
CVSS2: 6.4
EPSS Низкий

Описание

The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*
Версия до 0.6.20 (включая)
cpe:2.3:a:libexif_project:libexif:0.6.14:*:*:*:*:*:*:*
cpe:2.3:a:libexif_project:libexif:0.6.15:*:*:*:*:*:*:*
cpe:2.3:a:libexif_project:libexif:0.6.16:*:*:*:*:*:*:*
cpe:2.3:a:libexif_project:libexif:0.6.18:*:*:*:*:*:*:*
cpe:2.3:a:libexif_project:libexif:0.6.19:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00852
Низкий

6.4 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 13 лет назад

The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.

redhat
около 13 лет назад

The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.

debian
около 13 лет назад

The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Ta ...

github
больше 3 лет назад

The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.

oracle-oval
почти 13 лет назад

ELSA-2012-1255: libexif security update (MODERATE)

EPSS

Процентиль: 74%
0.00852
Низкий

6.4 Medium

CVSS2

Дефекты

CWE-119