Integer overflow in exif.cpp in exiv2 library allows context-dependent malicious users to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
Meder Kydyraliev discovered that exiv2 did not correctly handle certain
EXIF headers If a user or automated system were tricked into processing
a specially crafted image, a remote attacker could cause the application
linked against libexiv2 to crash, leading to a denial of service, or
possibly executing arbitrary code with user privileges (CVE-20 ...
Meder Kydyraliev discovered an integer overflow in the thumbnail
handling of libexif, the EXIF/IPTC metadata manipulation library, which
could result in the execution of arbitrary code
The old stable distribution (sarge) doesn't contain exiv2 packages
For the stable distribution (etch), this problem has been fixed in
version 010-15
We recommen ...
Vulmon