Red Hat Security AdvisoryRHSA-2007:0501
libexif integer overflow
Released 2007-06-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libexif-0.6.13-4.0.2.el5, libexif-0.6.13-4.0.2.el5.i386, libexif-0.6.13-4.0.2.el5.ia64 +5
- Red Hat Enterprise Linux AS version 4 libexif-0.5.12-5.1.0.2, libexif-0.5.12-5.1.0.2.i386, libexif-0.5.12-5.1.0.2.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libexif-0.6.13-4.0.2.el5, libexif-0.6.13-4.0.2.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libexif-0.6.13-4.0.2.el5, libexif-devel-0.6.13-4.0.2.el5, libexif-devel-0.6.13-4.0.2.el5.i386
- Red Hat Enterprise Linux Desktop version 4 libexif-0.5.12-5.1.0.2, libexif-0.5.12-5.1.0.2.i386, libexif-devel-0.5.12-5.1.0.2 +1
- Red Hat Enterprise Linux ES version 4 libexif-0.5.12-5.1.0.2, libexif-0.5.12-5.1.0.2.i386, libexif-0.5.12-5.1.0.2.ia64 +3
- Red Hat Enterprise Linux WS version 4 libexif-0.5.12-5.1.0.2, libexif-0.5.12-5.1.0.2.i386, libexif-0.5.12-5.1.0.2.ia64 +3
Fixes 1 record
Priority LOW 37
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image w…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04301 · Published 2007-06-14 · Fixed
