ID de Prueba:	1.3.6.1.4.1.25623.1.0.58397
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:118 (libexif)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to libexif announced via advisory MDKSA-2007:118. Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data. Updated packages have been patched to prevent this issue. Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:118 Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2645 BugTraq ID: 23927 http://www.securityfocus.com/bid/23927 Bugtraq: 20070604 FLEA-2007-0024-1: libexif (Google Search) http://www.securityfocus.com/archive/1/470502/100/100/threaded Debian Security Information: DSA-1487 (Google Search) http://www.debian.org/security/2008/dsa-1487 http://security.gentoo.org/glsa/glsa-200706-01.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:118 http://sourceforge.net/tracker/index.php?func=detail&aid=1716196&group_id=12272&atid=112272 http://osvdb.org/35978 http://secunia.com/advisories/25235 http://secunia.com/advisories/25540 http://secunia.com/advisories/25569 http://secunia.com/advisories/25599 http://secunia.com/advisories/25621 http://secunia.com/advisories/25932 http://secunia.com/advisories/26083 http://secunia.com/advisories/28776 SuSE Security Announcement: SUSE-SA:2007:039 (Google Search) http://www.novell.com/linux/security/advisories/2007_39_libexif.html SuSE Security Announcement: SUSE-SR:2007:014 (Google Search) http://www.novell.com/linux/security/advisories/2007_14_sr.html http://www.ubuntu.com/usn/usn-471-1 http://www.vupen.com/english/advisories/2007/1761 XForce ISS Database: libexif-exifdataloaddata-integer-overflow(34233) https://exchange.xforce.ibmcloud.com/vulnerabilities/34233
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.