libexif vulnerabilities

2008-10-1400:00:00

ubuntu.com

7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.0%

JSON

Releases

Ubuntu 7.10
Ubuntu 7.04
Ubuntu 6.06

Packages

libexif -

Details

Meder Kydyraliev discovered that libexif did not correctly handle certain
EXIF headers. If a user or automated system were tricked into processing
a specially crafted image, a remote attacker could cause the application
linked against libexif to crash, leading to a denial of service, or
possibly executing arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.10noarchlibexif12< 0.6.16-1ubuntu0.1UNKNOWN
Ubuntu7.10noarchlibexif-dev< 0.6.16-1ubuntu0.1UNKNOWN
Ubuntu7.04noarchlibexif12< 0.6.13-5ubuntu0.3UNKNOWN
Ubuntu7.04noarchlibexif-dev< 0.6.13-5ubuntu0.3UNKNOWN
Ubuntu6.06noarchlibexif12< 0.6.12-2ubuntu0.3UNKNOWN
Ubuntu6.06noarchlibexif-dev< 0.6.12-2ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	7.10	noarch	libexif12	< 0.6.16-1ubuntu0.1	UNKNOWN
Ubuntu	7.10	noarch	libexif-dev	< 0.6.16-1ubuntu0.1	UNKNOWN
Ubuntu	7.04	noarch	libexif12	< 0.6.13-5ubuntu0.3	UNKNOWN
Ubuntu	7.04	noarch	libexif-dev	< 0.6.13-5ubuntu0.3	UNKNOWN
Ubuntu	6.06	noarch	libexif12	< 0.6.12-2ubuntu0.3	UNKNOWN
Ubuntu	6.06	noarch	libexif-dev	< 0.6.12-2ubuntu0.3	UNKNOWN