CVE-2007-2645 Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitr...
HighCVSS 9.3
EPSS 13.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libexif | = 0.5 | No fix listed |
| libexif | = 0.5.12 | No fix listed |
| libexif | = 0.6.9 | No fix listed |
| libexif | = 0.6.11 | No fix listed |
| libexif | = 0.6.12 | No fix listed |
| libexif | = 0.6.13 | No fix listed |
| debian/libexif(Debian:12) | < 0.6.15-1 | 0.6.15-1 |
| debian/libexif(Debian:13) | < 0.6.15-1 | 0.6.15-1 |
| debian/libexif(Debian:14) | < 0.6.15-1 | 0.6.15-1 |
References
- Debian Security Tracker CVE-2007-2645 vendor-advisory
- bugs.debian.org issue-tracking
- 35978 vdb-entry
- 25235 patch third-party-advisory vendor-advisory
- 25540 third-party-advisory
- 25569 third-party-advisory
- 25599 third-party-advisory
- 25621 third-party-advisory
- 25932 third-party-advisory
- 26083 third-party-advisory
- 28776 third-party-advisory
- GLSA-200706-01 vendor-advisory
- sourceforge.net patch
- sourceforge.net
- DSA-1487 vendor-advisory
- MDKSA-2007:118 vendor-advisory
- SUSE-SR:2007:014 vendor-advisory
- SUSE-SA:2007:039 vendor-advisory
- 20070604 FLEA-2007-0024-1: libexif mailing-list
- 23927 exploit patch vdb-entry
- USN-471-1 vendor-advisory
- ADV-2007-1761 vdb-entry
- libexif-exifdataloaddata-integer-overflow(34233) vdb-entry
- issues.rpath.com