CVE-2007-2645
NoneCVSS
—
EPSS
13.1%
Published
May 14, 2007
CISA due date
—
The record
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libexif | 0 | 0.6.15-1 |
| Debian:12 | libexif | 0 | 0.6.15-1 |
| Debian:13 | libexif | 0 | 0.6.15-1 |
| Debian:3.1 | libexif | 0 | 0.6.9-6sarge2 |
| Debian:4.0 | libexif | 0 | 0.6.13-5etch2 |