(RHSA-2007:1165) Moderate: libexif security update

2007-12-1900:00:00

access.redhat.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.1%

JSON

The libexif packages contain the Exif library. Exif is an image file format
specification that enables metadata tags to be added to existing JPEG, TIFF
and RIFF files. The Exif library makes it possible to parse an Exif file
and read this metadata.

An infinite recursion flaw was found in the way libexif parses Exif image
tags. If a victim opens a carefully crafted Exif image file, it could cause
the application linked against libexif to crash. (CVE-2007-6351)

An integer overflow flaw was found in the way libexif parses Exif image
tags. If a victim opens a carefully crafted Exif image file, it could cause
the application linked against libexif to execute arbitrary code, or crash.
(CVE-2007-6352)

Users of libexif are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.

OSVersionArchitecturePackageVersionFilename
RedHat5i386libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat5srclibexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.src.rpm
RedHat5x86_64libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.x86_64.rpm
RedHat5s390libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.s390.rpm
RedHat5s390xlibexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.s390x.rpm
RedHat5ppclibexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.ppc.rpm
RedHat5ppc64libexif-devel< 0.6.13-4.0.2.el5_1.1libexif-devel-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat5ppc64libexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat5i386libexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat5ppclibexif< 0.6.13-4.0.2.el5_1.1libexif-0.6.13-4.0.2.el5_1.1.ppc.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat	5	src	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.src.rpm
RedHat	5	x86_64	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.x86_64.rpm
RedHat	5	s390	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.s390.rpm
RedHat	5	s390x	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.s390x.rpm
RedHat	5	ppc	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.ppc.rpm
RedHat	5	ppc64	libexif-devel	< 0.6.13-4.0.2.el5_1.1	libexif-devel-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat	5	ppc64	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.ppc64.rpm
RedHat	5	i386	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.i386.rpm
RedHat	5	ppc	libexif	< 0.6.13-4.0.2.el5_1.1	libexif-0.6.13-4.0.2.el5_1.1.ppc.rpm