CVE-2012-2845

Integer overflow in the jpeg_data_load_data function in jpeg-data.c in
libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service
(buffer over-read and application crash) or obtain potentially sensitive
information via a crafted JPEG file.

Bugs

• <https://bugzilla.novell.com/show_bug.cgi?id=771229&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681465&gt;