CVE-2007-6355
Dashboard / Vulnerabilities / CVE-2007-6355
CVE-2007-6355
Published: 18 Dec 2007Last Modified: 10 Apr 2026
Summary:
Details: Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
References: http://secunia.com/advisories/28110, http://secunia.com/advisories/28268, http://secunia.com/advisories/29580, http://security.gentoo.org/glsa/glsa-200712-17.xml, http://www.debian.org/security/2008/dsa-1533, http://www.vupen.com/english/advisories/2007/4251, http://bugs.gentoo.org/show_bug.cgi?id=202354, http://johnst.org/sw/exiftags/CHANGES, http://www.securityfocus.com/bid/26892
Affected packages
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
