CVE-2012-2837

Publication date 13 July 2012

Last updated 24 July 2024


Ubuntu priority

The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an image with crafted EXIF tags that are not properly handled during the formatting of EXIF maker note tags.

Status

Package Ubuntu Release Status
libexif 12.04 LTS precise
Fixed 0.6.20-2ubuntu0.1
11.10 oneiric
Fixed 0.6.20-1ubuntu0.1
11.04 natty
Fixed 0.6.20-0ubuntu1.1
10.04 LTS lucid
Fixed 0.6.19-1ubuntu0.1
8.04 LTS hardy
Fixed 0.6.16-2.1ubuntu0.2

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
libexif

References

Related Ubuntu Security Notices (USN)

Other references