NVD

Id
62814  
Name
CVE-2006-4168  
Description
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-06-14  
Modified Date
2012-10-30  
Seq
2006-4168  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326564 62814 CVE-2006-4168 20070613 Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability  View
326565 62814 CVE-2006-4168 oval:org.mitre.oval:def:9349  View
326566 62814 CVE-2006-4168 GLSA-200706-09  View
326567 62814 CVE-2006-4168 http://sourceforge.net/project/shownotes.php?release_id=515385  View
326568 62814 CVE-2006-4168 DSA-1310  View
326569 62814 CVE-2006-4168 MDKSA-2007:128  View
326570 62814 CVE-2006-4168 SUSE-SR:2007:014  View
326571 62814 CVE-2006-4168 SUSE-SA:2007:039  View
326572 62814 CVE-2006-4168 20070622 FLEA-2007-0028-1: libexif  View
326573 62814 CVE-2006-4168 24461  View
326574 62814 CVE-2006-4168 1018240  View
326575 62814 CVE-2006-4168 USN-478-1  View
326576 62814 CVE-2006-4168 ADV-2007-2165  View
326577 62814 CVE-2006-4168 multiple-libexif-exifdataloaddataentry-bo(34851)  View
326578 62814 CVE-2006-4168 https://issues.rpath.com/browse/RPL-1482  View
326579 62814 CVE-2006-4168 RHSA-2007:0501  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51790 JVNDB-2007-000453 Libexif の EXIF イメージ処理における整数オーバーフローの脆弱性 Libexif は多数の EXIF コンポーネントのある画像ファイルを処理する際に libexif/exif-data.c の exif_data_load_data_entry() 関数において、整数オーバーフローが発生する脆弱性が存在します。 CVE-2006-4168 20270 CVE-2006-4168 62814 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000453.html 2007-06-14 2012-01-30 View