Back to CVE Browser

CVE-2007-6356

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.0740%

EPSS Percentile4.65th

PublishedDec 18, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.

Affected Platforms (CPE)

📦

Aertherwide

Exiftags

<= 1.01

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=202354

🔗 http://johnst.org/sw/exiftags/CHANGES

🔗 http://secunia.com/advisories/28110

🔗 http://secunia.com/advisories/28268

🔗 http://secunia.com/advisories/29580

🔗 http://security.gentoo.org/glsa/glsa-200712-17.xml

🔗 http://www.debian.org/security/2008/dsa-1533

🔗 http://www.securityfocus.com/bid/26892

Related Vulnerabilities

CVE-2007-635410.0

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" ...

CVE-2007-635510.0

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that trig...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-049610.0

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website (nlws) 3.2 and earlier allows remote attackers to ex...