[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-2754-1 exactimage -- denial of service

ID: oval:org.secpod.oval:def:601102Date: (C)2013-09-25   (M)2022-10-10
Class: PATCHFamily: unix




It was discovered that exactimage, a fast image processing library, does not correctly handle error conditions of the embedded copy of dcraw. This could result in a crash or other behaviour in an application using the library due to an uninitialized variable being passed to longjmp. This is a different issue than CVE-2013-1438/DSA-2748-1.

Platform:
Debian 7.0
Debian 6.0
Product:
exactimage
Reference:
DSA-2754-1
CVE-2013-1441
CVE-2013-1438
CVE    2
CVE-2013-1441
CVE-2013-1438
CPE    3
cpe:/a:exactcode:exactimage
cpe:/o:debian:debian_linux:6.0
cpe:/o:debian:debian_linux:7.0

© SecPod Technologies