NVD

Id
54809  
Name
CVE-2007-2645  
Description
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-14  
Modified Date
2012-11-05  
Seq
2007-2645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278185 54809 CVE-2007-2645 GLSA-200706-01  View
278186 54809 CVE-2007-2645 http://sourceforge.net/project/shownotes.php?release_id=507447  View
278187 54809 CVE-2007-2645 http://sourceforge.net/tracker/index.php?func=detail&aid=1716196&group_id=12272&atid=112272  View
278188 54809 CVE-2007-2645 DSA-1487  View
278189 54809 CVE-2007-2645 MDKSA-2007:118  View
278190 54809 CVE-2007-2645 SUSE-SR:2007:014  View
278191 54809 CVE-2007-2645 SUSE-SA:2007:039  View
278192 54809 CVE-2007-2645 20070604 FLEA-2007-0024-1: libexif  View
278193 54809 CVE-2007-2645 23927  View
278194 54809 CVE-2007-2645 USN-471-1  View
278195 54809 CVE-2007-2645 ADV-2007-1761  View
278196 54809 CVE-2007-2645 libexif-exifdataloaddata-integer-overflow(34233)  View
278197 54809 CVE-2007-2645 https://issues.rpath.com/browse/RPL-1431  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51957 JVNDB-2007-000620 libexif の exif_data_load_data_entry() 関数における整数オーバーフローの脆弱性 libexif の exif_data_load_data_entry() 関数には、doff 変数もしくは s 変数が不正な EXIF データを処理した際に、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-2645 26000 CVE-2007-2645 54809 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000620.html 2007-05-14 2007-08-29 View