CVE-2007-6353
Fixed in a distro release EPSS 5%
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
Products: exiv2, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | exiv2 | 0.15-2 |
| Debian 13 | exiv2 | 0.15-2 |
| Debian 14 | exiv2 | 0.15-2 |
| Debian 4.0 | exiv2 | 0.10-1.5 |
| openSUSE Tumbleweed | exiv2 | 0.27.4-1.2 |