Off-by-one in libexif - CVE-2012-2840

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU31849

Off-by-one in libexif - CVE-2012-2840

Published: July 26, 2020


Vulnerability identifier: #VU31849
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-2840
CWE-ID: CWE-193
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library. A remote attacker can trigger an off-by-one error via crafted EXIF tags in an image and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

libexif
Amazon Linux AMI
Gentoo Linux
SUSE Linux
Slackware Linux
libexif (Alpine package)

How to mitigate CVE-2012-2840

Install update from vendor's website.

libexif - update to 0.6.21
libexif (Alpine package) - update to 0.6.21-r0

External References

Related Security Bulletins