• info
• discussion
• exploit
• solution
• references

EXIF Library EXIF File Processing Integer Overflow Vulnerability

Solution:
The vendor has released version 0.6.16 to address this issue; please see the reference section for details.


Slackware Linux -current

• Slackware libexif-0.6.16-i486-1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/li bexif-0.6.16-i486-1.tgz

Slackware Linux 11.0

• Slackware libexif-0.6.16-i486-1_slack11.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ libexif-0.6.16-i486-1_slack11.0.tgz

libexif libexif 0.6.13

• libexif libexif-0.6.16.tar.gz
  http://internap.dl.sourceforge.net/sourceforge/libexif/libexif-0.6.16. tar.gz

libexif libexif 0.6.14

• libexif libexif-0.6.16.tar.gz
  http://internap.dl.sourceforge.net/sourceforge/libexif/libexif-0.6.16. tar.gz

libexif libexif 0.6.15

• libexif libexif-0.6.16.tar.gz
  http://internap.dl.sourceforge.net/sourceforge/libexif/libexif-0.6.16. tar.gz

Slackware Linux 10.2

• Slackware libexif-0.6.16-i486-1_slack10.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ libexif-0.6.16-i486-1_slack10.2.tgz