Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2007:1166

The remote host is missing updates announced in
advisory RHSA-2007:1166.

The libexif packages contain the Exif library. Exif is an image file format
specification that enables metadata tags to be added to existing JPEG, TIFF
and RIFF files. The Exif library makes it possible to parse an Exif file
and read this metadata.

An integer overflow flaw was found in the way libexif parses Exif image
tags. If a victim opens a carefully crafted Exif image file, it could cause
the application linked against libexif to execute arbitrary code, or crash.

Users of libexif are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.

Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

Risk factor : High

CVSS Score:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2007-6352
BugTraq ID: 26942
Bugtraq: 20080105 rPSA-2008-0006-1 libexif (Google Search)
Debian Security Information: DSA-1487 (Google Search)
SuSE Security Announcement: SUSE-SR:2008:002 (Google Search)
XForce ISS Database: libexif-exifdataloaddatathumbnail-bo(39167)
CopyrightCopyright (c) 2007 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2021 E-Soft Inc. All rights reserved.