Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2007-2645

Published: 14/05/2007 Updated: 16/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Libexif

Vulnerability Summary

Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif prior to 0.6.14 allows user-assisted remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.

Vulnerable Product Search on Vulmon Subscribe to Product

libexif libexif 0.6.12

libexif libexif 0.6.13

libexif libexif 0.6.9

libexif libexif 0.5

libexif libexif 0.5.12

libexif libexif 0.6.11

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2007-2645: libexif 0.6.14 fixes security issue
Debian Bug report logs - #424775 CVE-2007-2645: libexif 0614 fixes security issue Package: libexif; Maintainer for libexif is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Stefan Fritsch <sf@sfritschde> Date: Thu, 17 May 2007 09:54:02 UTC Severity: grave Tags: security ...
Ubuntu Security Notice: libexif vulnerability
Victor Stinner discovered that libexif did not correctly validate the size of some EXIF header fields By tricking a user into opening an image with specially crafted EXIF headers, a remote attacker could cause the application using libexif to crash, resulting in a denial of service ...

Exploits

Exploit DB: LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow
source: wwwsecurityfocuscom/bid/23927/info The libexif library is prone to an integer-overflow vulnerability because the software fails to properly ensure that integer math operations do not result in overflows Successful exploits of this vulnerability allow remote attackers to execute arbitrary machine code in the context of an applica ...

References

NVD-CWE-Otherhttp://sourceforge.net/tracker/index.php?func=detail&aid=1716196&group_id=12272&atid=112272http://sourceforge.net/project/shownotes.php?release_id=507447http://www.securityfocus.com/bid/23927http://secunia.com/advisories/25235https://issues.rpath.com/browse/RPL-1431http://security.gentoo.org/glsa/glsa-200706-01.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:118http://www.novell.com/linux/security/advisories/2007_39_libexif.htmlhttp://www.novell.com/linux/security/advisories/2007_14_sr.htmlhttp://www.ubuntu.com/usn/usn-471-1http://secunia.com/advisories/25540http://secunia.com/advisories/25569http://secunia.com/advisories/25599http://secunia.com/advisories/25621http://secunia.com/advisories/25932http://secunia.com/advisories/26083http://www.debian.org/security/2008/dsa-1487http://secunia.com/advisories/28776http://www.vupen.com/english/advisories/2007/1761http://osvdb.org/35978https://exchange.xforce.ibmcloud.com/vulnerabilities/34233http://www.securityfocus.com/archive/1/470502/100/100/threadedhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=424775https://usn.ubuntu.com/471-1/https://nvd.nist.govhttps://www.exploit-db.com/exploits/30024/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook