Vulnerability CVE-2012-2837: Information

Description

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Severity: MEDIUM (5.0)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:libexif_project:libexif:0.6.14:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libexif_project:libexif:0.6.15:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libexif_project:libexif:0.6.16:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libexif_project:libexif:0.6.18:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libexif_project:libexif:0.6.19:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*

      End including

      0.6.20

      ---