CVE-2007-6351

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exifloaderwrite function in exif_loader.c.

References

Affected packages

Debian:11 / libexif

Package

Name: libexif
Purl: pkg:deb/debian/libexif?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.16-2.1

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / libexif

Package

Name: libexif
Purl: pkg:deb/debian/libexif?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.16-2.1

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / libexif

Package

Name: libexif
Purl: pkg:deb/debian/libexif?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.16-2.1

Ecosystem specific

{
    "urgency": "low"
}