Test ID:	1.3.6.1.4.1.25623.1.0.831697
Category:	Mandrake Local Security Checks
Title:	Mandriva Update for exif MDVSA-2012:107 (exif)
Summary:	The remote host is missing an update for the 'exif'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'exif' package(s) announced via the referenced advisory. Vulnerability Insight: A vulnerability has been discovered and corrected in exif: An integer overflow in the function jpeg_data_load_data in the exif program could cause a data read beyond the end of a buffer, causing an application crash or leakage of potentially sensitive information when parsing a crafted JPEG file (CVE-2012-2845). The updated packages have been upgraded to the 0.6.21 version which is not vulnerable to this issue. Affected Software/OS: exif on Mandriva Linux 2011.0, Mandriva Enterprise Server 5.2 Solution: Please Install the Updated Packages. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2845 BugTraq ID: 54437 http://www.securityfocus.com/bid/54437 http://www.mandriva.com/security/advisories?name=MDVSA-2012:107 http://sourceforge.net/mailarchive/message.php?msg_id=29534027 http://secunia.com/advisories/49988
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.