Vulnerability Name:

CVE-2007-6352 (CCN-39167)

Assigned:2007-12-14
Published:2007-12-14
Updated:2018-10-15
Summary:Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-189
CWE-190
Vulnerability Consequences:Gain Access
References:Source: CONFIRM
Type: UNKNOWN
http://bugs.gentoo.org/show_bug.cgi?id=202350

Source: MITRE
Type: CNA
CVE-2007-6352

Source: OSVDB
Type: UNKNOWN
42653

Source: CCN
Type: RHSA-2007-1165
Moderate: libexif security update

Source: CCN
Type: RHSA-2007-1166
Moderate: libexif security update

Source: CCN
Type: SA28076
libexif Integer Overflow and Denial of Service

Source: SECUNIA
Type: Vendor Advisory
28076

Source: SECUNIA
Type: Vendor Advisory
28127

Source: SECUNIA
Type: Vendor Advisory
28195

Source: SECUNIA
Type: Vendor Advisory
28266

Source: SECUNIA
Type: Vendor Advisory
28346

Source: SECUNIA
Type: Vendor Advisory
28400

Source: SECUNIA
Type: Vendor Advisory
28636

Source: SECUNIA
Type: Vendor Advisory
28776

Source: CCN
Type: SA29381
Sun Solaris libexif Integer Overflow Vulnerability

Source: SECUNIA
Type: Vendor Advisory
29381

Source: SECUNIA
Type: Vendor Advisory
32274

Source: GENTOO
Type: UNKNOWN
GLSA-200712-15

Source: CCN
Type: SECTRACK ID: 1019124
libexif Infinite Recursion Bug Permits Denial of Service Attacks and Integer Overflow Lets Remote Users Execute Arbitrary Code

Source: SUNALERT
Type: UNKNOWN
234701

Source: CCN
Type: Sun Alert ID: 234701
A Security Vulnerability in Solaris 10 libexif May Allow Code Execution or a Denial of Service (DoS) Condition

Source: CCN
Type: ASA-2008-016
libexif security update (RHSA-2007-1166)

Source: CCN
Type: ASA-2008-140
A Security Vulnerability in Solaris 10 libexif May Allow Code Execution or a Denial of Service (DoS) Condition (Sun 234701)

Source: DEBIAN
Type: UNKNOWN
DSA-1487

Source: DEBIAN
Type: DSA-1487
libexif -- several vulnerabilities

Source: CCN
Type: GLSA-200712-15
libexif: Multiple vulnerabilities

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2008:005

Source: SUSE
Type: UNKNOWN
SUSE-SR:2008:002

Source: CCN
Type: OSVDB ID: 42653
libexif exif-data.c exif_data_load_data_thumbnail Function EXIF Data Handling Overflow

Source: REDHAT
Type: Vendor Advisory
RHSA-2007:1165

Source: REDHAT
Type: Vendor Advisory
RHSA-2007:1166

Source: BUGTRAQ
Type: UNKNOWN
20080105 rPSA-2008-0006-1 libexif

Source: BID
Type: UNKNOWN
26942

Source: CCN
Type: BID-26942
libexif Image Tag Remote Integer Overflow Vulnerability

Source: SECTRACK
Type: UNKNOWN
1019124

Source: CCN
Type: USN-654-1
libexif vulnerabilities

Source: UBUNTU
Type: UNKNOWN
USN-654-1

Source: VUPEN
Type: Vendor Advisory
ADV-2007-4278

Source: VUPEN
Type: Vendor Advisory
ADV-2008-0947

Source: CCN
Type: Red Hat Bugzilla Bug 425561
CVE-2007-6352 libexif integer overflow

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=425561

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=425621

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=425631

Source: XF
Type: UNKNOWN
libexif-exifdataloaddatathumbnail-bo(39167)

Source: XF
Type: UNKNOWN
libexif-exifdataloaddatathumbnail-bo(39167)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-2068

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:11029

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:4814

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-4608

Source: FEDORA
Type: UNKNOWN
FEDORA-2007-4667

Source: SUSE
Type: SUSE-SR:2008:001
SUSE Security Summary Report

Source: SUSE
Type: SUSE-SR:2008:002
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:libexif:libexif:*:*:*:*:*:*:*:* (Version <= 0.6.16)

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:libexif:libexif:0.5.12:*:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007::x86_64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0::x86-64:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.04:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:server:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2007.1::x86-64:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4.6.z:ga:as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4.6.z:ga:es:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20076352
    V
    		CVE-2007-6352
    2022-05-20
    oval:org.opensuse.security:def:42355
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:33108
    P
    		Security update for java-1_7_1-ibm (Moderate) (in QA)
    2022-01-04
    oval:org.opensuse.security:def:31719
    P
    		Security update for glib-networking (Important)
    2021-12-13
    oval:org.opensuse.security:def:42151
    P
    		Security update for python3 (Moderate)
    2021-12-13
    oval:org.opensuse.security:def:32235
    P
    		Security update for openssh (Important)
    2021-12-06
    oval:org.opensuse.security:def:26177
    P
    		Security update for webkit2gtk3 (Important)
    2021-12-01
    oval:org.opensuse.security:def:31298
    P
    		Security update for pcre (Moderate)
    2021-11-10
    oval:org.opensuse.security:def:26159
    P
    		Security update for systemd (Moderate)
    2021-11-04
    oval:org.opensuse.security:def:31271
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-09-23
    oval:org.opensuse.security:def:32191
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-09-23
    oval:org.opensuse.security:def:26128
    P
    		Security update for postgresql13 (Moderate)
    2021-09-16
    oval:org.opensuse.security:def:32169
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:31666
    P
    		Security update for MozillaFirefox (Important)
    2021-08-17
    oval:org.opensuse.security:def:31663
    P
    		Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:31662
    P
    		Security update for libsndfile (Critical)
    2021-08-05
    oval:org.opensuse.security:def:31224
    P
    		Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important)
    2021-07-21
    oval:org.opensuse.security:def:31650
    P
    		Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:31651
    P
    		Security update for libsolv (Important)
    2021-06-28
    oval:org.opensuse.security:def:31213
    P
    		Security update for libnettle (Important)
    2021-06-23
    oval:org.opensuse.security:def:31212
    P
    		Security update for ovmf (Important)
    2021-06-22
    oval:org.opensuse.security:def:32130
    P
    		Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)
    2021-06-18
    oval:org.opensuse.security:def:26071
    P
    		Security update for the Linux Kernel (Important)
    2021-06-09
    oval:org.opensuse.security:def:42591
    P
    		libexif-0.6.17-2.14.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:26070
    P
    		Security update for spice (Important)
    2021-06-08
    oval:org.opensuse.security:def:36184
    P
    		libexif-0.6.17-2.14.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:31633
    P
    		Security update for libX11 (Important)
    2021-06-08
    oval:org.opensuse.security:def:36445
    P
    		libexif-devel-0.6.17-2.14.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32104
    P
    		Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)
    2021-06-04
    oval:org.opensuse.security:def:32912
    P
    		Security update for python36 (Moderate)
    2021-05-04
    oval:org.opensuse.security:def:32081
    P
    		Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)
    2021-04-28
    oval:org.opensuse.security:def:26027
    P
    		Security update for glibc (Important)
    2021-04-13
    oval:org.opensuse.security:def:26216
    P
    		Security update for MozillaFirefox (Important)
    2021-03-31
    oval:org.opensuse.security:def:31363
    P
    		Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:31736
    P
    		Security update for MozillaFirefox (Important)
    2021-03-01
    oval:org.opensuse.security:def:26198
    P
    		Security update for avahi (Moderate)
    2021-02-23
    oval:org.opensuse.security:def:32260
    P
    		Security update for java-1_7_1-ibm (Important)
    2021-02-18
    oval:org.opensuse.security:def:31725
    P
    		Security update for openvswitch (Important)
    2021-02-12
    oval:org.opensuse.security:def:26075
    P
    		Security update for ImageMagick (Important)
    2021-01-22
    oval:org.opensuse.security:def:35744
    P
    		libexif-0.6.17-2.12 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:41992
    P
    		libexif-0.6.17-2.12 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35948
    P
    		libexif-0.6.17-2.14.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35585
    P
    		libexif-0.6.17-2.12 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25499
    P
    		Security update for openldap2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31868
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32709
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25994
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25340
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26451
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:25574
    P
    		Security update for MozillaFirefox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32017
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31768
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26709
    P
    		gmime on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26006
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:25637
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26509
    P
    		Security update for cacti, cacti-spine (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26018
    P
    		Security update for freerdp (Important)
    2020-12-01
    oval:org.opensuse.security:def:25766
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:31829
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:25872
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:27182
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25295
    P
    		Security update for python-ipaddress (Important)
    2020-12-01
    oval:org.opensuse.security:def:25854
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32511
    P
    		findutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31420
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25307
    P
    		Security update for libX11 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26624
    P
    		pam_krb5 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25912
    P
    		Security update for zziplib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25734
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25421
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:31822
    P
    		Security update for axis (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26230
    P
    		Security update for libreoffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31053
    P
    		Security update for the Linux Kernel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25702
    P
    		Security update for libvpx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31869
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26712
    P
    		gpg2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26585
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25809
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25562
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31927
    P
    		Security update for giflib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26912
    P
    		gtk2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31065
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25840
    P
    		Security update for libvirt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32316
    P
    		Security update for rsync (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26770
    P
    		libtiff3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31416
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26279
    P
    		Security update for gimp (Low)
    2020-12-01
    oval:org.opensuse.security:def:25925
    P
    		Security update for pcre (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31988
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25137
    P
    		Security update for SDL (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31430
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26310
    P
    		Security update for Cloud Compute 12 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32404
    P
    		Security update for w3m (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27443
    P
    		libexif-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25498
    P
    		Security update for icu (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31501
    P
    		Security update for python-pycrypto (Important)
    2020-12-01
    oval:org.opensuse.security:def:26420
    P
    		Security update for phpMyAdmin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26013
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32670
    P
    		gd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25212
    P
    		Security update for squid (Important)
    2020-12-01
    oval:org.opensuse.security:def:31579
    P
    		Security update for supportutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26412
    P
    		Security update for tor (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32470
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:25510
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:31960
    P
    		Security update for gtk2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25995
    P
    		Security update for mariadb (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25580
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:32025
    P
    		Security update for kernel-source (Important)
    2020-12-01
    oval:org.opensuse.security:def:26465
    P
    		Security update for enigmail (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33147
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25937
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31807
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26744
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25721
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:27147
    P
    		hyper-v on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25815
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31873
    P
    		Security update for cvs (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25296
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:26571
    P
    		kdelibs3 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25868
    P
    		Security update for pcre (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32550
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25733
    P
    		Security update for mgetty (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31507
    P
    		Security update for python27 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32873
    P
    		gnutls on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25371
    P
    		Security update for python-ipaddress (Important)
    2020-12-01
    oval:org.opensuse.security:def:31782
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26673
    P
    		bind on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26550
    P
    		fuse on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25745
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25478
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31878
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26274
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31054
    P
    		Security update for the Linux kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25783
    P
    		Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:26726
    P
    		kdelibs4 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31415
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25713
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31966
    P
    		Security update for icu (Important)
    2020-12-01
    oval:org.opensuse.security:def:26947
    P
    		libexif on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25136
    P
    		Security update for clamav (Important)
    2020-12-01
    oval:org.opensuse.security:def:31139
    P
    		Security update for less (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25924
    P
    		Security update for php5 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32365
    P
    		Security update for supportutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27408
    P
    		ghostscript-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31427
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26336
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:25974
    P
    		Security update for gimp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32032
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25148
    P
    		Security update for cups (Important)
    2020-12-01
    oval:org.opensuse.security:def:31522
    P
    		Security update for rsync (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26363
    P
    		Security update for libgit2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32426
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.mitre.oval:def:17551
    P
    		USN-654-1 -- libexif vulnerabilities
    2014-06-30
    oval:org.mitre.oval:def:18662
    P
    		DSA-1487-1 libexif - several vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:8088
    P
    		DSA-1487 libexif -- several vulnerabilities
    2014-06-23
    oval:org.mitre.oval:def:22348
    P
    		ELSA-2007:1165: libexif security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:11029
    V
    		Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.
    2013-04-29
    oval:org.mitre.oval:def:4814
    V
    		A Security Vulnerability in Solaris 10 libexif May Allow Code Execution or a Denial of Service (DoS) Condition
    2008-05-05
    oval:org.debian:def:1487
    V
    		several vulnerabilities
    2008-02-08
    oval:com.redhat.rhsa:def:20071165
    P
    		RHSA-2007:1165: libexif security update (Moderate)
    2007-12-19
    oval:com.redhat.rhsa:def:20071166
    P
    		RHSA-2007:1166: libexif security update (Moderate)
    2007-12-19
    BACK
    libexif libexif *
    libexif libexif 0.5.12
    gentoo linux *
    mandrakesoft mandrake linux corporate server 3.0
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    debian debian linux 3.1
    sun solaris 10
    sun solaris 10
    canonical ubuntu 6.06
    mandrakesoft mandrake linux 2007
    mandrakesoft mandrake linux 2007
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 3.0
    redhat enterprise linux 5
    redhat enterprise linux 5
    mandrakesoft mandrake linux 2007.1
    mandrakesoft mandrake linux 2008.0
    debian debian linux 4.0
    canonical ubuntu 7.04
    redhat enterprise linux 5
    redhat enterprise linux 5
    canonical ubuntu 7.10
    mandrakesoft mandrake linux 2008.0
    mandrakesoft mandrake linux 2007.1
    redhat enterprise linux 4.6.z ga
    redhat enterprise linux 4.6.z ga