NetSight
IP …
high7.5

CVE-2012-2840

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers…

Impact

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags in an image.

Affected products

VendorProductAffected versions
Libexif ProjectLibexif
through 0.6.20
Versions 0.6.14, 0.6.15, 0.6.16, 0.6.18, 0.6.19

Weakness classification

CWE-189

References