exiftags Multiple Unspecified Buffer Overflow And Denial Of Service Vulnerabilities
BID:26892
Info
exiftags Multiple Unspecified Buffer Overflow And Denial Of Service Vulnerabilities
| Bugtraq ID: | 26892 |
| Class: | Unknown |
| CVE: |
CVE-2007-6031 CVE-2007-6354 CVE-2007-6355 CVE-2007-6356 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 15 2007 12:00AM |
| Updated: | Apr 01 2008 10:19PM |
| Credit: | Christian Schmid and Meder Kydyralievis are credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Gentoo Linux exiftags exiftags 1.00 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
exiftags exiftags 1.01 |
Discussion
exiftags Multiple Unspecified Buffer Overflow And Denial Of Service Vulnerabilities
The 'exiftags' utility is prone to multiple unspecified buffer-overflow and denial-of-service vulnerabilities.
An attacker can exploit these issues to deny access to legitimate users. Attackers may also be able to execute arbitrary code, but this has not been confirmed.
Very few technical details are currently available. We will update this BID as more information emerges.
These issues affect versions prior to exiftags 1.01.
The 'exiftags' utility is prone to multiple unspecified buffer-overflow and denial-of-service vulnerabilities.
An attacker can exploit these issues to deny access to legitimate users. Attackers may also be able to execute arbitrary code, but this has not been confirmed.
Very few technical details are currently available. We will update this BID as more information emerges.
These issues affect versions prior to exiftags 1.01.
Exploit / POC
exiftags Multiple Unspecified Buffer Overflow And Denial Of Service Vulnerabilities
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
exiftags Multiple Unspecified Buffer Overflow And Denial Of Service Vulnerabilities
Solution:
The vendor has released updates. Please see the references for more information.
exiftags exiftags 1.00
Solution:
The vendor has released updates. Please see the references for more information.
exiftags exiftags 1.00
-
exiftags exiftags-1.01.tar.gz
http://johnst.org/sw/exiftags/exiftags-1.01.tar.gz
References
exiftags Multiple Unspecified Buffer Overflow And Denial Of Service Vulnerabilities
References:
References:
- exiftags Homepage (exiftags)
- exiftags Release Notes (exiftags)