返回 CVE 浏览器

CVE-2007-6356

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.0740%

EPSS Percentile4.65th

Published2007年12月18日

Last Modified2026年4月23日

Vulnerability Description

exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.

Affected Platforms (CPE)

📦

Aertherwide

Exiftags

<= 1.01

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=202354

🔗 http://johnst.org/sw/exiftags/CHANGES

🔗 http://secunia.com/advisories/28110

🔗 http://secunia.com/advisories/28268

🔗 http://secunia.com/advisories/29580

🔗 http://security.gentoo.org/glsa/glsa-200712-17.xml

🔗 http://www.debian.org/security/2008/dsa-1533

🔗 http://www.securityfocus.com/bid/26892

相关漏洞威胁

CVE-2007-635410.0

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" ...

CVE-2007-635510.0

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that trig...

CVE-2007-005710.0

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a sh...

CVE-2007-010010.0

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows r...