LWN.net Logo

libexif: denial of service

Package(s):libexif CVE #(s):CVE-2007-6351
Created:December 19, 2007 Updated:February 11, 2008
Description: From the Red Hat advisory: An infinite recursion flaw was found in the way libexif parses Exif image tags. If a victim opens a carefully crafted Exif image file, it could cause the application linked against libexif to crash.
Alerts:
Debian DSA-1487-1 2008-02-08
SuSE SUSE-SR:2008:002 2008-01-25
Mandriva MDVSA-2008:005 2007-01-09
rPath rPSA-2008-0006-1 2008-01-04
Gentoo 200712-15 2007-12-29
Fedora FEDORA-2007-4667 2007-12-20
Red Hat RHSA-2007:1165-01 2007-12-19
Fedora FEDORA-2007-4608 2007-12-20

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds