---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: libexif Integer Overflow and Denial of Service SECUNIA ADVISORY ID: SA28076 VERIFY ADVISORY: http://secunia.com/advisories/28076/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: >From remote SOFTWARE: libexif 0.x http://secunia.com/product/4755/ DESCRIPTION: Two vulnerabilities have been reported in libexif, which can be exploited by malicious people to cause a DoS (Denial of Service) or to compromise an application using the library. 1) An integer overflow error in the "exif_data_load_data_thumbnail()" function in exif-data.c when processing exif image tags can be exploited to cause a memory corruption and may allow execution of arbitrary code via a specially crafted exif file. 2) An infinite recursion error in the "exif_loader_write()" function in exif-loader.c when handling exif image tags can be exploited to cause an application to crash via a specially crafted exif file. SOLUTION: Fixed in the CVS repository. PROVIDED AND/OR DISCOVERED BY: The vendor credits Meder Kydyraliev, Google Security Team. Reported in a Red Hat advisory. ORIGINAL ADVISORY: https://rhn.redhat.com/errata/RHSA-2007-1165.html http://rhn.redhat.com/errata/RHSA-2007-1166.html ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------