Mandriva- Advisories MDVSA-2008:005: Updated libexif packages fix multiple vulnerabilities

[Mandriva]

Advisories MDVSA-2008:005: Updated libexif packages fix multiple vulnerabilities
An infinite recursion flaw was found in the way that libexif parses
Exif image tags. A carefully crafted Exif image file opened by an
application linked against libexif could cause the application to crash
(CVE-2007-6351).

An integer overflow flaw was also found in how libexif parses
Exif image tags. A carefully crafted Exif image file opened by
an application linked against libexif could cause the application
to crash or execute arbitrary code with the privileges of the user
executing the application (CVE-2007-6352).

The updated packages have been patched to correct these issues.
http://mandrivausers.org/index.php?showtopic=46924
http://mandrivausers.org/index.php?showtopic=46924
Thu, 10 Jan 2008 00:13:19 +0000