Lucene search

K
osvGoogleOSV:DLA-228-1
HistoryMay 28, 2015 - 12:00 a.m.

exactimage - security update

2015-05-2800:00:00
Google
osv.dev
16

EPSS

0.048

Percentile

92.7%

A vulnerability has been discovered in the ExactImage image manipulation
programs.

  • CVE-2015-3885
    Eduardo Castellanos discovered an Integer overflow in the dcraw version
    included in ExactImage. This vulnerability allows remote attackers to
    cause a denial of service (crash) via a crafted image.

For the oldoldstable distribution (squeeze), these problems have been fixed in
version 0.8.1-3+deb6u4.

For the oldstable, stable, and testing distributions, these problems will be
fixed soon.