Back to CVE Browser

CVE-2007-6356

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.0740%

EPSS Percentile4.65th

PublishedDec 18, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.

Affected Platforms (CPE)

📦

Aertherwide

Exiftags

<= 1.01

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=202354

🔗 http://johnst.org/sw/exiftags/CHANGES

🔗 http://secunia.com/advisories/28110

🔗 http://secunia.com/advisories/28268

🔗 http://secunia.com/advisories/29580

🔗 http://security.gentoo.org/glsa/glsa-200712-17.xml

🔗 http://www.debian.org/security/2008/dsa-1533

🔗 http://www.securityfocus.com/bid/26892

Related Vulnerabilities

CVE-2007-635410.0

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" ...

CVE-2007-635510.0

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that trig...

CVE-2007-293810.0

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Inter...

CVE-2007-294610.0

Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL) 14.5.0.44 allows remote atta...