Test ID:	1.3.6.1.4.1.25623.1.0.72131
Category:	Mandrake Local Security Checks
Title:	Mandriva Security Advisory MDVSA-2012:107 (exif)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to exif announced via advisory MDVSA-2012:107. A vulnerability has been discovered and corrected in exif: An integer overflow in the function jpeg_data_load_data in the exif program could cause a data read beyond the end of a buffer, causing an application crash or leakage of potentially sensitive information when parsing a crafted JPEG file (CVE-2012-2845). The updated packages have been upgraded to the 0.6.21 version which is not vulnerable to this issue. Affected: 2011., Enterprise Server 5.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDVSA-2012:107 http://sourceforge.net/mailarchive/message.php?msg_id=29534027 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2845 BugTraq ID: 54437 http://www.securityfocus.com/bid/54437 http://www.mandriva.com/security/advisories?name=MDVSA-2012:107 http://sourceforge.net/mailarchive/message.php?msg_id=29534027 http://secunia.com/advisories/49988
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.