CVE-2007-6353
HIGH severity · CVSS 7.5 · Integer overflow
7.5CVSS HIGH
Summary
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)5%
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://bugs.gentoo.org/show_bug.cgi?id=202351Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.htmlAdvisory
- http://secunia.com/advisories/28132
- http://secunia.com/advisories/28178
- http://secunia.com/advisories/28267
- http://secunia.com/advisories/28412
- http://secunia.com/advisories/28610
- http://secunia.com/advisories/32273