Lucene search
RedHatRHSA-2007:0501HistoryJun 14, 2007 - 12:00 a.m.
(RHSA-2007:0501) Moderate: libexif integer overflow
2007-06-1400:00:00
access.redhat.com
18
EPSS
0.261
Percentile
96.7%
The libexif package contains the EXIF library. Applications use this
library to parse EXIF image files.
An integer overflow flaw was found in the way libexif parses EXIF image
tags. If a victim opens a carefully crafted EXIF image file it could cause
the application linked against libexif to execute arbitrary code or crash.
(CVE-2007-4168)
Users of libexif should upgrade to these updated packages, which contain a
backported patch and are not vulnerable to this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | any | s390 | libexif | < 0.5.12-5.1.0.2 | libexif-0.5.12-5.1.0.2.s390.rpm |
| RedHat | any | i386 | libexif-devel | < 0.5.12-5.1.0.2 | libexif-devel-0.5.12-5.1.0.2.i386.rpm |
| RedHat | any | s390 | libexif-devel | < 0.5.12-5.1.0.2 | libexif-devel-0.5.12-5.1.0.2.s390.rpm |
| RedHat | any | s390x | libexif-devel | < 0.5.12-5.1.0.2 | libexif-devel-0.5.12-5.1.0.2.s390x.rpm |
| RedHat | 5 | ia64 | libexif-devel | < 0.6.13-4.0.2.el5 | libexif-devel-0.6.13-4.0.2.el5.ia64.rpm |
| RedHat | 5 | ppc | libexif-devel | < 0.6.13-4.0.2.el5 | libexif-devel-0.6.13-4.0.2.el5.ppc.rpm |
| RedHat | any | x86_64 | libexif-devel | < 0.5.12-5.1.0.2 | libexif-devel-0.5.12-5.1.0.2.x86_64.rpm |
| RedHat | any | s390x | libexif | < 0.5.12-5.1.0.2 | libexif-0.5.12-5.1.0.2.s390x.rpm |
| RedHat | any | src | libexif | < 0.5.12-5.1.0.2 | libexif-0.5.12-5.1.0.2.src.rpm |
| RedHat | 5 | x86_64 | libexif | < 0.6.13-4.0.2.el5 | libexif-0.6.13-4.0.2.el5.x86_64.rpm |
Related
nessus
nessus
Fedora 7 : libexif-0.6.15-2.fc7 (2007-0414)
2007-11-06 00:00:00
Fedora Core 5 : libexif-0.6.12-5 (2007-605)
2007-06-27 00:00:00
Fedora Core 6 : libexif-0.6.15-2.fc6 (2007-614)
2007-06-29 00:00:00
centos
centos
libexif security update
2007-06-16 06:38:10
oraclelinux
oraclelinux
Moderate: libexif security update: integer overflow
2007-06-14 00:00:00
prion
prion
Design/Logic Flaw
2007-06-20 23:30:00
cve
cve
CVE-2007-4168
2007-06-20 23:30:00
CVE-2006-4168
2007-06-14 19:30:00
nvd
nvd
CVE-2007-4168
2007-06-20 23:30:00
CVE-2006-4168
2007-06-14 19:30:00
ubuntu
ubuntu
libexif vulnerability
2007-06-27 00:00:00
openvas
openvas
Mandriva Update for libexif MDKSA-2007:128 (libexif)
2009-04-09 00:00:00
Fedora Update for libexif FEDORA-2007-605
2009-02-27 00:00:00
Slackware Advisory SSA:2007-164-01 libexif
2012-09-11 00:00:00
debiancve
debiancve
CVE-2006-4168
2007-06-14 19:30:00
debian
debian
[SECURITY] [DSA 1309-1] New libexif packages fix integer overflow
2007-06-16 23:23:43
[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow
2007-06-16 23:24:15
securityvulns
securityvulns
ubuntucve
ubuntucve
CVE-2006-4168
2007-06-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:16:02
gentoo
gentoo
libexif: Buffer overflow
2007-06-26 00:00:00
cvelist
cvelist
CVE-2006-4168
2007-06-14 19:00:00
CVE-2007-4168
2007-06-20 23:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: libexif-0.6.12-5
2007-06-25 17:30:41
[SECURITY] Fedora Core 6 Update: libexif-0.6.15-2.fc6
2007-06-28 01:50:38
[SECURITY] Fedora 7 Update: libexif-0.6.15-2.fc7
2007-06-13 21:10:47
slackware
slackware
[slackware-security] libexif
2007-06-14 03:34:36
suse
suse
remote denial of service in libexif
2007-07-03 17:45:54