Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
| Summary | |
|---|---|
| Title | New libexif packages fix several vulnerabilities |
| Informations | |||
|---|---|---|---|
| Name | DSA-1487 | First vendor Publication | 2008-02-08 |
| Vendor | Debian | Last vendor Modification | 2008-02-08 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.3 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Several vulnerabilities have been discovered in the EXIF parsing code of the libexif library, which can lead to denial of service or the xecution of arbitrary code if a user is tricked into opening a malformed image. CVE-2007-2645 Victor Stinner discovered an integer overflow, which may result in denial of service or potentially the execution of arbitrary code. CVE-2007-6351 Meder Kydyraliev discovered an infinite loop, which may result in denial of service. CVE-2007-6352 Victor Stinner discovered an integer overflow, which may result in denial of service or potentially the execution of arbitrary code. This update also fixes two potential NULL pointer deferences. For the stable distribution (etch), these problems have been fixed in version 0.6.13-5etch2. For the old stable distribution (sarge), these problems have been fixed in 0.6.9-6sarge2. We recommend that you upgrade your libexif packages. |
Original Source
| Url : http://www.debian.org/security/2008/dsa-1487 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-189 | Numeric Errors (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:11029 | |||
| Oval ID: | oval:org.mitre.oval:def:11029 | ||
| Title: | Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c. | ||
| Description: | Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2007-6352 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:17551 | |||
| Oval ID: | oval:org.mitre.oval:def:17551 | ||
| Title: | USN-654-1 -- libexif vulnerabilities | ||
| Description: | Meder Kydyraliev discovered that libexif did not correctly handle certain EXIF headers. | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-654-1 CVE-2007-6351 CVE-2007-6352 | Version: | 7 |
| Platform(s): | Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 | Product(s): | libexif |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:18662 | |||
| Oval ID: | oval:org.mitre.oval:def:18662 | ||
| Title: | DSA-1487-1 libexif - several vulnerabilities | ||
| Description: | Several vulnerabilities have been discovered in the EXIF parsing code of the libexif library, which can lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed image. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1487-1 CVE-2007-2645 CVE-2007-6351 CVE-2007-6352 | Version: | 7 |
| Platform(s): | Debian GNU/Linux 4.0 | Product(s): | libexif |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:22348 | |||
| Oval ID: | oval:org.mitre.oval:def:22348 | ||
| Title: | ELSA-2007:1165: libexif security update (Moderate) | ||
| Description: | Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2007:1165-01 CVE-2007-6351 CVE-2007-6352 | Version: | 13 |
| Platform(s): | Oracle Linux 5 | Product(s): | libexif |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:4814 | |||
| Oval ID: | oval:org.mitre.oval:def:4814 | ||
| Title: | A Security Vulnerability in Solaris 10 libexif May Allow Code Execution or a Denial of Service (DoS) Condition | ||
| Description: | Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2007-6352 | Version: | 1 |
| Platform(s): | Sun Solaris 10 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:8088 | |||
| Oval ID: | oval:org.mitre.oval:def:8088 | ||
| Title: | DSA-1487 libexif -- several vulnerabilities | ||
| Description: | Several vulnerabilities have been discovered in the EXIF parsing code of the libexif library, which can lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed image. The Common Vulnerabilities and Exposures project identifies the following problems: Victor Stinner discovered an integer overflow, which may result in denial of service or potentially the execution of arbitrary code. Meder Kydyraliev discovered an infinite loop, which may result in denial of service. Victor Stinner discovered an integer overflow, which may result in denial of service or potentially the execution of arbitrary code. This update also fixes two potential NULL pointer deferences. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1487 CVE-2007-2645 CVE-2007-6351 CVE-2007-6352 | Version: | 3 |
| Platform(s): | Debian GNU/Linux 4.0 Debian GNU/Linux 3.1 | Product(s): | libexif |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:9420 | |||
| Oval ID: | oval:org.mitre.oval:def:9420 | ||
| Title: | libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c. | ||
| Description: | libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2007-6351 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-10-13 | Name : SLES10: Security update for libexif5 File : nvt/sles10_libexif5.nasl |
| 2009-10-13 | Name : SLES10: Security update for libexif File : nvt/sles10_libexif.nasl |
| 2009-10-10 | Name : SLES9: Security update for libexif File : nvt/sles9p5021388.nasl |
| 2009-10-10 | Name : SLES9: Security update for libexif File : nvt/sles9p5012800.nasl |
| 2009-06-03 | Name : Solaris Update for GNOME EXIF tag parsing library for digital cameras 121096-02 File : nvt/gb_solaris_121096_02.nasl |
| 2009-06-03 | Name : Solaris Update for GNOME 2.6.0 121095-02 File : nvt/gb_solaris_121095_02.nasl |
| 2009-04-09 | Name : Mandriva Update for libexif MDVSA-2008:005 (libexif) File : nvt/gb_mandriva_MDVSA_2008_005.nasl |
| 2009-04-09 | Name : Mandriva Update for libexif MDKSA-2007:118 (libexif) File : nvt/gb_mandriva_MDKSA_2007_118.nasl |
| 2009-03-23 | Name : Ubuntu Update for libexif vulnerability USN-471-1 File : nvt/gb_ubuntu_USN_471_1.nasl |
| 2009-03-23 | Name : Ubuntu Update for libexif vulnerabilities USN-654-1 File : nvt/gb_ubuntu_USN_654_1.nasl |
| 2009-03-06 | Name : RedHat Update for libexif RHSA-2007:1166-01 File : nvt/gb_RHSA-2007_1166-01_libexif.nasl |
| 2009-03-06 | Name : RedHat Update for libexif RHSA-2007:1165-01 File : nvt/gb_RHSA-2007_1165-01_libexif.nasl |
| 2009-02-27 | Name : Fedora Update for libexif FEDORA-2007-4667 File : nvt/gb_fedora_2007_4667_libexif_fc8.nasl |
| 2009-02-27 | Name : Fedora Update for libexif FEDORA-2007-548 File : nvt/gb_fedora_2007_548_libexif_fc6.nasl |
| 2009-02-27 | Name : Fedora Update for libexif FEDORA-2007-4608 File : nvt/gb_fedora_2007_4608_libexif_fc7.nasl |
| 2009-02-27 | Name : Fedora Update for libexif FEDORA-2007-0414 File : nvt/gb_fedora_2007_0414_libexif_fc7.nasl |
| 2009-02-27 | Name : Fedora Update for libexif FEDORA-2007-0001 File : nvt/gb_fedora_2007_0001_libexif_fc7.nasl |
| 2009-02-27 | Name : CentOS Update for libexif CESA-2007:1166 centos4 x86_64 File : nvt/gb_CESA-2007_1166_libexif_centos4_x86_64.nasl |
| 2009-02-27 | Name : CentOS Update for libexif CESA-2007:1166 centos4 i386 File : nvt/gb_CESA-2007_1166_libexif_centos4_i386.nasl |
| 2009-01-28 | Name : SuSE Update for libexif SUSE-SA:2007:039 File : nvt/gb_suse_2007_039.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200706-01 (libexif) File : nvt/glsa_200706_01.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200712-15 (libexif) File : nvt/glsa_200712_15.nasl |
| 2008-02-15 | Name : Debian Security Advisory DSA 1487-1 (libexif) File : nvt/deb_1487_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 42653 | libexif exif-data.c exif_data_load_data_thumbnail Function EXIF Data Handling... |
| 42652 | libexif exif_loader.c exif_loader_write Function EXIF Data Handling Overflow |
| 35978 | libexif exif-data.c exif_data_load_data_entry Function EXIF Data Handling Ove... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2007-1165.nasl - Type : ACT_GATHER_INFO |
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2007-1166.nasl - Type : ACT_GATHER_INFO |
| 2012-09-24 | Name : The remote Fedora host is missing a security update. File : fedora_2007-0003.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20071219_libexif_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2010-01-06 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2007-1165.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12045.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_11555.nasl - Type : ACT_GATHER_INFO |
| 2009-04-23 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-654-1.nasl - Type : ACT_GATHER_INFO |
| 2009-04-23 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-005.nasl - Type : ACT_GATHER_INFO |
| 2008-02-11 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1487.nasl - Type : ACT_GATHER_INFO |
| 2008-01-14 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libexif5-4883.nasl - Type : ACT_GATHER_INFO |
| 2008-01-14 | Name : The remote openSUSE host is missing a security update. File : suse_libexif5-4882.nasl - Type : ACT_GATHER_INFO |
| 2008-01-14 | Name : The remote openSUSE host is missing a security update. File : suse_libexif-4886.nasl - Type : ACT_GATHER_INFO |
| 2008-01-14 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libexif-4884.nasl - Type : ACT_GATHER_INFO |
| 2007-12-31 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200712-15.nasl - Type : ACT_GATHER_INFO |
| 2007-12-24 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2007-1166.nasl - Type : ACT_GATHER_INFO |
| 2007-12-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-1166.nasl - Type : ACT_GATHER_INFO |
| 2007-12-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2007-1165.nasl - Type : ACT_GATHER_INFO |
| 2007-12-24 | Name : The remote Fedora host is missing a security update. File : fedora_2007-4667.nasl - Type : ACT_GATHER_INFO |
| 2007-12-24 | Name : The remote Fedora host is missing a security update. File : fedora_2007-4608.nasl - Type : ACT_GATHER_INFO |
| 2007-12-13 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libexif-3721.nasl - Type : ACT_GATHER_INFO |
| 2007-12-13 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libexif5-3723.nasl - Type : ACT_GATHER_INFO |
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-471-1.nasl - Type : ACT_GATHER_INFO |
| 2007-10-17 | Name : The remote openSUSE host is missing a security update. File : suse_libexif-3703.nasl - Type : ACT_GATHER_INFO |
| 2007-10-17 | Name : The remote openSUSE host is missing a security update. File : suse_libexif-3718.nasl - Type : ACT_GATHER_INFO |
| 2007-10-17 | Name : The remote openSUSE host is missing a security update. File : suse_libexif5-3704.nasl - Type : ACT_GATHER_INFO |
| 2007-10-17 | Name : The remote openSUSE host is missing a security update. File : suse_libexif5-3724.nasl - Type : ACT_GATHER_INFO |
| 2007-06-12 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2007-118.nasl - Type : ACT_GATHER_INFO |
| 2007-06-12 | Name : The remote Fedora Core host is missing a security update. File : fedora_2007-548.nasl - Type : ACT_GATHER_INFO |
| 2007-06-07 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200706-01.nasl - Type : ACT_GATHER_INFO |
| 2006-11-06 | Name : The remote host is missing Sun Security Patch number 121095-05 File : solaris10_121095.nasl - Type : ACT_GATHER_INFO |
| 2006-11-06 | Name : The remote host is missing Sun Security Patch number 121096-05 File : solaris10_x86_121096.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:27:18 |
|
