Red Hat Security AdvisoryRHSA-2007:1165
libexif security update
Released 2007-12-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libexif-0.6.13-4.0.2.el5_1.1, libexif-0.6.13-4.0.2.el5_1.1.i386, libexif-0.6.13-4.0.2.el5_1.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libexif-0.6.13-4.0.2.el5_1.1, libexif-0.6.13-4.0.2.el5_1.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libexif-0.6.13-4.0.2.el5_1.1, libexif-devel-0.6.13-4.0.2.el5_1.1, libexif-devel-0.6.13-4.0.2.el5_1.1.i386
Fixes 2 records
Priority LOW 35
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02727 · Published 2007-12-20 · Fixed CWE-189
Priority LOW 23
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01675 · Published 2007-12-20 · Fixed
