CVE-2007-6355

2007-12-1820:46:00

NVD-CWE-noinfo

CWE-189

[email protected]

web.nvd.nist.gov

exiftags

integer overflow

cve-2007-6355

security vulnerability

6.5 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.5%

JSON

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a “field offset overflow” that triggers an “illegal memory access,” a different vulnerability than CVE-2007-6354.

CPENameOperatorVersion
aertherwide:exiftagsaertherwide exiftagseq0.80
aertherwide:exiftagsaertherwide exiftagseq0.96
aertherwide:exiftagsaertherwide exiftagseq0.93
aertherwide:exiftagsaertherwide exiftagseq0.98
aertherwide:exiftagsaertherwide exiftagseq0.99
aertherwide:exiftagsaertherwide exiftagseq0.94
aertherwide:exiftagsaertherwide exiftagseq0.92
aertherwide:exiftagsaertherwide exiftagseq0.90
aertherwide:exiftagsaertherwide exiftagseq0.95
aertherwide:exiftagsaertherwide exiftagseq0.97

CPE	Name	Operator	Version
aertherwide:exiftags	aertherwide exiftags	eq	0.80
aertherwide:exiftags	aertherwide exiftags	eq	0.96
aertherwide:exiftags	aertherwide exiftags	eq	0.93
aertherwide:exiftags	aertherwide exiftags	eq	0.98
aertherwide:exiftags	aertherwide exiftags	eq	0.99
aertherwide:exiftags	aertherwide exiftags	eq	0.94
aertherwide:exiftags	aertherwide exiftags	eq	0.92
aertherwide:exiftags	aertherwide exiftags	eq	0.90
aertherwide:exiftags	aertherwide exiftags	eq	0.95
aertherwide:exiftags	aertherwide exiftags	eq	0.97