CVE-2007-6353 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-6353
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6353

Description: Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39118 UBUNTU http://www.ubuntu.com/usn/usn-655-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html SAID Secunia Advisory: SA28132 Secunia Advisory: SA28178 Secunia Advisory: SA28267 Secunia Advisory: SA28412 Secunia Advisory: SA28610 Secunia Advisory: SA32273 MISC http://bugs.gentoo.org/show_bug.cgi?id=202351 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:006 GENTOO http://security.gentoo.org/glsa/glsa-200712-16.xml FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1474 CONFIRM BID 26918

Return to the previous page.