Mandriva- Advisories MDKSA-2007:118: Updated libexif packages fix crash and possible arbitrary code execution issue

[Mandriva]

Advisories MDKSA-2007:118: Updated libexif packages fix crash and possible arbitrary code execution issue
Integer overflow in the exif_data_load_data_entry function in
exif-data.c in libexif before 0.6.14 allows user-assisted remote
attackers to cause a denial of service (crash) or possibly execute
arbitrary code via crafted EXIF data.

Updated packages have been patched to prevent this issue.
http://mandrivausers.org/index.php?showtopic=42015
Array
Fri, 08 Jun 2007 22:25:57 +0000