USN-1513-1 : libexif vulnerabilities

NASLDB: USN-1513-1 : libexif vulnerabilities

General

ID: 60105
Name: USN-1513-1 : libexif vulnerabilities

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

Mateusz Jurczyk discovered that libexif incorrectly parsed certain
malformed EXIF tags. If a user or automated system were tricked into
processing a specially crafted image file, an attacker could cause
libexif to crash, leading to a denial of service, or possibly obtain
sensitive information. (CVE-2012-2812, CVE-2012-2813)

Mateusz Jurczyk discovered that libexif incorrectly parsed certain
malformed EXIF tags. If a user or automated system were tricked into
processing a specially crafted image file, an attacker could cause
libexif to crash, leading to a denial of service, or possibly execute
arbitrary code. (CVE-2012-2814)

Yunho Kim discovered that libexif incorrectly parsed certain
malformed EXIF tags. If a user or automated system were tricked into
processing a specially crafted image file, an attacker could cause
libexif to crash, leading to a denial of service, or possibly obtain
sensitive information. (CVE-2012-2836)

Yunho Kim discovered that libexif incorrectly parsed certain
malformed EXIF tags. If a user or automated system were tricked into
processing a specially crafted image file, an attacker could cause
libexif to crash, leading to a denial of service. (CVE-2012-2837)

Dan Fandrich discovered that libexif incorrectly parsed certain
malformed EXIF tags. If a user or automated system were tricked into
processing a specially crafted image file, an attacker could cause
libexif to crash, leading to a denial of service, or possibly execute
arbitrary code. (CVE-2012-2840, CVE-2012-2841)