PT-2007-1055 · Libexif+1 · Libexif+1
Publicado
2007-12-19
·
Atualizado
2024-06-15
·
CVE-2007-6351
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
libexif versions 0.6.16 and earlier
Description:
The issue allows context-dependent attackers to cause a denial of service, possibly involving the
exif loader write function in exif loader.c. Multiple vulnerabilities in the libexif package can lead to a violation of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.Recommendations:
For libexif versions 0.6.16 and earlier, update to a version later than 0.6.16 to resolve the issue. As a temporary workaround, consider restricting the use of the
exif loader write function in exif loader.c until a patch is available. Avoid using crafted EXIF tags in image files to minimize the risk of exploitation.Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Libexif