| Description: | Description:
The remote host is missing an update to libexif
announced via advisory FEDORA-2007-548.
Most digital cameras produce EXIF files, which are JPEG files with
extra tags that contain information about the image. The EXIF library
allows you to parse an EXIF file and read the data from those tags.
Update Information:
This update to the latest upstream release fixes a number of
bugs, among them a possible integer overflow in the
exif_data_load_data_entry function (CVE-2007-2645), which
allows user-assisted remote attackers to cause a denial of
service (crash) or possibly execute arbitrary code via
crafted EXIF data.
* Wed May 30 2007 Matthias Clasen - 0.6.15-1
- Update to 0.6.15
- Drop obsolete patch
* Thu May 24 2007 Matthias Clasen - 0.6.13-4
- Add patch for CVE-2007-2645.
* Sun Feb 4 2007 Matthias Clasen - 0.6.13-3
- Package review cleanups
- Avoid multilib conflicts by using pregenerated docs
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-548
Risk factor : Critical
CVSS Score:
9.3
|
