Debian: DSA-2559-1 Critical Libexif Buffer Overflow Remote Exploit

Several vulnerabilities were found in libexif, a library used to parse EXIF
meta-data on camera files.

CVE-2012-2812: A heap-based out-of-bounds array read in the
exif_entry_get_value function allows remote attackers to cause a denial of
service or possibly obtain potentially sensitive information from process
memory via an image with crafted EXIF tags.

CVE-2012-2813: A heap-based out-of-bounds array read in the
exif_convert_utf16_to_utf8 function allows remote attackers to cause a denial
of service or possibly obtain potentially sensitive information from process
memory via an image with crafted EXIF tags.

CVE-2012-2814: A buffer overflow in the exif_entry_format_value function
allows remote attackers to cause a denial of service or possibly execute
arbitrary code via an image with crafted EXIF tags.

CVE-2012-2836: A heap-based out-of-bounds array read in the
exif_data_load_data function allows remote attackers to cause a denial of
service or possibly obtain potentially sensitive information fro...