Test ID:	1.3.6.1.4.1.25623.1.0.60659
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1533-2)
Summary:	The remote host is missing an update for the Debian 'exiftags' package(s) announced via the DSA-1533-2 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'exiftags' package(s) announced via the DSA-1533-2 advisory. Vulnerability Insight: Christian Schmid and Meder Kydyraliev (Google Security) discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems: CVE-2007-6354 Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code. CVE-2007-6355 Flawed data validation could lead to integer overflows, causing other invalid memory accesses, also with the potential for memory corruption or arbitrary code execution. CVE-2007-6356 Cyclical EXIF image file directory (IFD) references could cause a denial of service (infinite loop). For the oldstable distribution (sarge), these problems have been fixed in version 0.98-1.1+0sarge1. For the stable distribution (etch), these problems have been fixed in version 0.98-1.1+etch1. For the unstable distribution (sid), these problems have been fixed in version 1.01-0.1. Affected Software/OS: 'exiftags' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6354 BugTraq ID: 26892 http://www.securityfocus.com/bid/26892 Debian Security Information: DSA-1533 (Google Search) http://www.debian.org/security/2008/dsa-1533 http://security.gentoo.org/glsa/glsa-200712-17.xml http://bugs.gentoo.org/show_bug.cgi?id=202354 http://secunia.com/advisories/28110 http://secunia.com/advisories/28268 http://secunia.com/advisories/29580 http://www.vupen.com/english/advisories/2007/4251 Common Vulnerability Exposure (CVE) ID: CVE-2007-6355 Common Vulnerability Exposure (CVE) ID: CVE-2007-6356
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.