Test ID:	1.3.6.1.4.1.25623.1.0.60654
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 1533-1 (exiftags)
Summary:	The remote host is missing an update to exiftags announced via advisory DSA 1533-1.;; This VT has been deprecated and merged into the VT 'Debian: Security Advisory (DSA-1533)' (OID: 1.3.6.1.4.1.25623.1.0.60659).
Description:	Summary: The remote host is missing an update to exiftags announced via advisory DSA 1533-1. This VT has been deprecated and merged into the VT 'Debian: Security Advisory (DSA-1533)' (OID: 1.3.6.1.4.1.25623.1.0.60659). Vulnerability Insight: Christian Schmid and Meder Kydyraliev (Google Security) discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems: CVE-2007-6354 Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code. CVE-2007-6355 Flawed data validation could lead to integer overflows, causing other invalid memory accesses, also with the potential for memory corruption or arbitrary code execution. CVE-2007-6356 Cyclical EXIF image file directory (IFD) references could cause a denial of service (infinite loop). For the stable distribution (etch), these problems have been fixed in version 0.98-1.1+etch1. The old stable distribution (sarge) cannot be fixed synchronously with the Etch version due to a technical limitation in the Debian archive management scripts. For the unstable distribution (sid), these problems have been fixed in version 1.01-0.1. Solution: We recommend that you upgrade your exiftags package. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6354 BugTraq ID: 26892 http://www.securityfocus.com/bid/26892 Debian Security Information: DSA-1533 (Google Search) http://www.debian.org/security/2008/dsa-1533 http://security.gentoo.org/glsa/glsa-200712-17.xml http://bugs.gentoo.org/show_bug.cgi?id=202354 http://secunia.com/advisories/28110 http://secunia.com/advisories/28268 http://secunia.com/advisories/29580 http://www.vupen.com/english/advisories/2007/4251 Common Vulnerability Exposure (CVE) ID: CVE-2007-6355 Common Vulnerability Exposure (CVE) ID: CVE-2007-6356
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.