Advisories:rPSA-2008-0006

From rPath Wiki

rPath Security Advisory 2008-0006-1

Published: 2008-01-04

Products

• rPath Linux 1

Rating

Minor

Exposure Level Classification

Indirect User Deterministic Unauthorized Access

Updated Versions

• libexif=conary.rpath.com@rpl:1/0.6.16-0.2-1

rPath Issue Tracking System

• RPL-2068

References

• CVE-2007-6351
• CVE-2007-6352

Description

Previous versions of the libexif package contain multiple

vulnerabilities, the most serious of which allows user-assisted

attackers to execute arbitrary code using images with maliciously

crafted EXIF tags.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html