1. Ubuntu Security Notices
  2. USN-654-1

USN-654-1: libexif vulnerabilities

Publication date

14 October 2008

Overview

libexif vulnerabilities

Releases

Packages

Details

Meder Kydyraliev discovered that libexif did not correctly handle certain
EXIF headers. If a user or automated system were tricked into processing
a specially crafted image, a remote attacker could cause the application
linked against libexif to crash, leading to a denial of service, or
possibly executing arbitrary code with user privileges.

Meder Kydyraliev discovered that libexif did not correctly handle certain
EXIF headers. If a user or automated system were tricked into processing
a specially crafted image, a remote attacker could cause the application
linked against libexif to crash, leading to a denial of service, or
possibly executing arbitrary code with user privileges.

Update instructions

After a standard system upgrade you need to restart your session to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
7.10 gutsy libexif12 –  0.6.16-1ubuntu0.1
7.04 feisty libexif12 –  0.6.13-5ubuntu0.3
6.06 dapper libexif12 –  0.6.12-2ubuntu0.3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›