[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96078

 
 

909

 
 

78009

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2007-6352

Date: (C)2007-12-19   (M)2017-10-04
 
CVSS Score: 6.8Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Reference:
SECTRACK-1019124
http://www.securityfocus.com/archive/1/archive/1/485822/100/0/threaded
SUNALERT-234701
BID-26942
SECUNIA-28076
SECUNIA-28127
SECUNIA-28195
SECUNIA-28266
SECUNIA-28346
SECUNIA-28400
SECUNIA-28636
SECUNIA-28776
SECUNIA-29381
SECUNIA-32274
OSVDB-42653
ADV-2007-4278
ADV-2008-0947
DSA-1487
FEDORA-2007-4608
FEDORA-2007-4667
GLSA-200712-15
MDVSA-2008:005
RHSA-2007:1165
RHSA-2007:1166
SUSE-SR:2008:002
USN-654-1
http://bugs.gentoo.org/show_bug.cgi?id=202350
https://bugzilla.redhat.com/show_bug.cgi?id=425561
https://bugzilla.redhat.com/show_bug.cgi?id=425621
https://bugzilla.redhat.com/show_bug.cgi?id=425631
https://issues.rpath.com/browse/RPL-2068
libexif-exifdataloaddatathumbnail-bo(39167)

CWE    1
CWE-189
OVAL    2
oval:org.secpod.oval:def:301622
oval:org.mitre.oval:def:8088

© 2013 SecPod Technologies