Test ID:	1.3.6.1.4.1.25623.1.1.1.1.2008.1474
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1474-1)
Summary:	The remote host is missing an update for the Debian 'exiv2' package(s) announced via the DSA-1474-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'exiv2' package(s) announced via the DSA-1474-1 advisory. Vulnerability Insight: Meder Kydyraliev discovered an integer overflow in the thumbnail handling of libexif, the EXIF/IPTC metadata manipulation library, which could result in the execution of arbitrary code. The old stable distribution (sarge) doesn't contain exiv2 packages. For the stable distribution (etch), this problem has been fixed in version 0.10-1.5. We recommend that you upgrade your exiv2 packages. Affected Software/OS: 'exiv2' package(s) on Debian 4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6353 BugTraq ID: 26918 http://www.securityfocus.com/bid/26918 Debian Security Information: DSA-1474 (Google Search) http://www.debian.org/security/2008/dsa-1474 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00674.html https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00652.html http://security.gentoo.org/glsa/glsa-200712-16.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:006 http://bugs.gentoo.org/show_bug.cgi?id=202351 http://secunia.com/advisories/28132 http://secunia.com/advisories/28178 http://secunia.com/advisories/28267 http://secunia.com/advisories/28412 http://secunia.com/advisories/28610 http://secunia.com/advisories/32273 SuSE Security Announcement: SUSE-SR:2008:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html http://www.ubuntu.com/usn/usn-655-1 http://www.vupen.com/english/advisories/2007/4252 XForce ISS Database: exiv2-setdataarea-bo(39118) https://exchange.xforce.ibmcloud.com/vulnerabilities/39118
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.