← back
CVE-2007-6353

CVE-2007-6353

EPSS 4.9%
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.gentoo.org/show_bug.cgi?id=202351http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=425921http://secunia.com/advisories/28132http://secunia.com/advisories/28178http://secunia.com/advisories/28267http://secunia.com/advisories/28412http://secunia.com/advisories/28610http://secunia.com/advisories/32273http://security.gentoo.org/glsa/glsa-200712-16.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/39118https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00652.html