Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2007:0501
HistoryJun 16, 2007 - 6:38 a.m.

libexif security update

2007-06-1606:38:10
CentOS Project
lists.centos.org
45

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.261 Low

EPSS

Percentile

96.8%

JSON

CentOS Errata and Security Advisory CESA-2007:0501

The libexif package contains the EXIF library. Applications use this
library to parse EXIF image files.

An integer overflow flaw was found in the way libexif parses EXIF image
tags. If a victim opens a carefully crafted EXIF image file it could cause
the application linked against libexif to execute arbitrary code or crash.
(CVE-2007-4168)

Users of libexif should upgrade to these updated packages, which contain a
backported patch and are not vulnerable to this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-June/076107.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076118.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076131.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076132.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076158.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076159.html

Affected packages:
libexif
libexif-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0501

Related

nessus 13
oraclelinux 1
redhat 1
prion 1
nvd 2
cve 2
ubuntu 1
openvas 18
debiancve 1
debian 2
veracode 1
ubuntucve 1
securityvulns 1
gentoo 1
cvelist 2
fedora 4
slackware 1
suse 1
nessus
nessus
Fedora Core 6 : libexif-0.6.15-2.fc6 (2007-614)
2007-06-29 00:00:00
Fedora Core 5 : libexif-0.6.12-5 (2007-605)
2007-06-27 00:00:00
Fedora 7 : libexif-0.6.15-2.fc7 (2007-0414)
2007-11-06 00:00:00
oraclelinux
oraclelinux
Moderate: libexif security update: integer overflow
2007-06-14 00:00:00
redhat
redhat
(RHSA-2007:0501) Moderate: libexif integer overflow
2007-06-14 00:00:00
prion
prion
Design/Logic Flaw
2007-06-20 23:30:00
nvd
nvd
CVE-2007-4168
2007-06-20 23:30:00
CVE-2006-4168
2007-06-14 19:30:00
cve
cve
CVE-2007-4168
2007-06-20 23:30:00
CVE-2006-4168
2007-06-14 19:30:00
ubuntu
ubuntu
libexif vulnerability
2007-06-27 00:00:00
openvas
openvas
Mandriva Update for libexif MDKSA-2007:128 (libexif)
2009-04-09 00:00:00
Fedora Update for libexif FEDORA-2007-605
2009-02-27 00:00:00
Slackware Advisory SSA:2007-164-01 libexif
2012-09-11 00:00:00
debiancve
debiancve
CVE-2006-4168
2007-06-14 19:30:00
debian
debian
[SECURITY] [DSA 1309-1] New libexif packages fix integer overflow
2007-06-16 23:23:43
[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow
2007-06-16 23:24:15
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:16:02
ubuntucve
ubuntucve
CVE-2006-4168
2007-06-14 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability
2007-06-13 00:00:00
gentoo
gentoo
libexif: Buffer overflow
2007-06-26 00:00:00
cvelist
cvelist
CVE-2006-4168
2007-06-14 19:00:00
CVE-2007-4168
2007-06-20 23:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: libexif-0.6.12-5
2007-06-25 17:30:41
[SECURITY] Fedora Core 6 Update: libexif-0.6.15-2.fc6
2007-06-28 01:50:38
[SECURITY] Fedora 7 Update: libexif-0.6.15-2.fc7
2007-06-13 21:10:47
slackware
slackware
[slackware-security] libexif
2007-06-14 03:34:36
suse
suse
remote denial of service in libexif
2007-07-03 17:45:54

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.261 Low

EPSS

Percentile

96.8%

JSON
Related for CESA-2007:0501
nessus13oraclelinux1redhat1prion1nvd2cve2ubuntu1openvas18debiancve1debian2veracode1ubuntucve1securityvulns1gentoo1cvelist2fedora4slackware1suse1