CVE-2007-6352
- State
- Published
- Severity
- Not scored
- Published
- Dec 20, 2007
- Updated
- Aug 7, 2024
- Reserved
- Dec 14, 2007
Description
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2007:1166vendor-advisory
- oval:org.mitre.oval:def:4814vdb-entrysignature
- 234701vendor-advisory
- GLSA-200712-15vendor-advisory
- https://issues.rpath.com/browse/RPL-2068
- SUSE-SR:2008:002vendor-advisory
- 28195third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=425631
- 32274third-party-advisory
- 26942vdb-entry
- 28776third-party-advisory
- 28076third-party-advisory
- 42653vdb-entry
- 28346third-party-advisory
- 20080105 rPSA-2008-0006-1 libexifmailing-list
- ADV-2008-0947vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=202350
- https://bugzilla.redhat.com/show_bug.cgi?id=425621
- oval:org.mitre.oval:def:11029vdb-entrysignature
- libexif-exifdataloaddatathumbnail-bo(39167)vdb-entry
- FEDORA-2007-4608vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=425561
- 1019124vdb-entry
- ADV-2007-4278vdb-entry
- FEDORA-2007-4667vendor-advisory
- 29381third-party-advisory
- RHSA-2007:1165vendor-advisory
- DSA-1487vendor-advisory
- 28636third-party-advisory
- 28266third-party-advisory
- 28400third-party-advisory
- MDVSA-2008:005vendor-advisory
- 28127third-party-advisory
- USN-654-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.