CVE-2012-2812
Description
The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory via crafted EXIF tags in an image.
Risk Information
Base Score
6.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
EPSS Score
Exploitation Probability
0.928
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| library to parse EXIF files (USN-1513-1) libexif12_0.6.20-2ubuntu0.1_i386.deb | Linux |
| library to parse EXIF files (USN-1513-1) libexif12_0.6.20-2ubuntu0.1_amd64.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234