CVE-2007-2645

2007-05-1400:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.399 Low

EPSS

Percentile

97.3%

JSON

Integer overflow in the exif_data_load_data_entry function in exif-data.c
in libexif before 0.6.14 allows user-assisted remote attackers to cause a
denial of service (crash) or possibly execute arbitrary code via crafted
EXIF data, involving the (1) doff or (2) s variable.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlibexif< 0.6.12-2ubuntu0.2UNKNOWN
ubuntu6.10noarchlibexif< 0.6.13-4ubuntu0.2UNKNOWN
ubuntu7.04noarchlibexif< 0.6.13-5ubuntu0.2UNKNOWN