Red Hat Security AdvisoryRHSA-2007:1166
libexif security update
Released 2007-12-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 libexif-0.5.12-5.1.0.2.el4_6.1, libexif-0.5.12-5.1.0.2.el4_6.1.i386, libexif-0.5.12-5.1.0.2.el4_6.1.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 libexif-0.5.12-5.1.0.2.el4_6.1, libexif-0.5.12-5.1.0.2.el4_6.1.i386, libexif-devel-0.5.12-5.1.0.2.el4_6.1 +1
- Red Hat Enterprise Linux ES version 4 libexif-0.5.12-5.1.0.2.el4_6.1, libexif-0.5.12-5.1.0.2.el4_6.1.i386, libexif-0.5.12-5.1.0.2.el4_6.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 libexif-0.5.12-5.1.0.2.el4_6.1, libexif-0.5.12-5.1.0.2.el4_6.1.i386, libexif-0.5.12-5.1.0.2.el4_6.1.ia64 +3
Fixes 1 record
Priority LOW 35
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02727 · Published 2007-12-20 · Fixed CWE-189
