CVE-2012-2806: Buffer Overflow
A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially-crafted JPEG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application.
Patch: http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830
References: http://code.google.com/p/chromium/issues/detail?id=130240 https://bugzilla.mozilla.org/showbug.cgi?id=759802
Other sources
Heap-based buffer overflow in the getsos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large component count in the header of a JPEG image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2806?
CVE-2012-2806 is classified as a high severity vulnerability due to the potential for denial of service and possible code execution.
How do I fix CVE-2012-2806?
To fix CVE-2012-2806, users should update libjpeg-turbo to the latest version provided by their vendor.
What systems are affected by CVE-2012-2806?
CVE-2012-2806 specifically affects libjpeg-turbo version 1.2.0 and potentially other versions if they implement similar vulnerabilities.
What type of vulnerability is CVE-2012-2806?
CVE-2012-2806 is a heap-based buffer overflow vulnerability that can be triggered by processing malformed JPEG images.
Can CVE-2012-2806 be exploited remotely?
Yes, CVE-2012-2806 can be exploited remotely if a user opens a maliciously crafted JPEG image.