[libexif] [CVE-2007-6351] [CVE-2007-6352] possibility of DoS or arbitrary code execution

[disabled.user]

References:
MDVSA-2008:005 (http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:005)

Quoting:
"An infinite recursion flaw was found in the way that libexif parses
Exif image tags. A carefully crafted Exif image file opened by an
application linked against libexif could cause the application to crash
(CVE-2007-6351).

An integer overflow flaw was also found in how libexif parses
Exif image tags. A carefully crafted Exif image file opened by
an application linked against libexif could cause the application
to crash or execute arbitrary code with the privileges of the user
executing the application (CVE-2007-6352)."

[disabled.user (disabled.user-deactivatedaccount)]

This has also been fixed for Debian:
DSA-1487-1 (http://www.debian.org/security/2008/dsa-1487)

[disabled.user (disabled.user-deactivatedaccount)]

DSA-1487-1 also mentions CVE-2007-2645, which already got fixed with USN-471-1.

[Kees Cook (kees)]

This problem has been addressed with the following USN:

http://www.ubuntu.com/usn/usn-654-1

Please feel free to report future bugs.