NetSight
medium5.0

CVE-2012-2837

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers…

Impact

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Affected products

VendorProductAffected versions
Libexif ProjectLibexif
through 0.6.20
Versions 0.6.14, 0.6.15, 0.6.16, 0.6.18, 0.6.19

Weakness classification

References