Detections
Analytics
Debian DSA-1533-2 : exiftags - insufficient input sanitizing
critical Nessus Plugin ID 31710
Synopsis
The remote Debian host is missing a security-related update.Description
Christian Schmid and Meder Kydyraliev (Google Security) discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems :- CVE-2007-6354 Inadequate EXIF property validation could lead to invalid memory accesses if executed on a maliciously crafted image, potentially including heap corruption and the execution of arbitrary code.
- CVE-2007-6355 Flawed data validation could lead to integer overflows, causing other invalid memory accesses, also with the potential for memory corruption or arbitrary code execution.
- CVE-2007-6356 Cyclical EXIF image file directory (IFD) references could cause a denial of service (infinite loop).
Solution
For the oldstable distribution (sarge), these problems have been fixed in version 0.98-1.1+0sarge1.For the stable distribution (etch), these problems have been fixed in version 0.98-1.1+etch1.
See Also
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457062
https://security-tracker.debian.org/tracker/CVE-2007-6354
https://security-tracker.debian.org/tracker/CVE-2007-6355
Plugin Details
Severity: Critical
ID: 31710
File Name: debian_DSA-1533.nasl
Version: 1.21
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 3/31/2008
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:exiftags, cpe:/o:debian:debian_linux:4.0, cpe:/o:debian:debian_linux:3.1
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Patch Publication Date: 3/27/2008