CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.

Link	Resource
http://johnst.org/sw/exiftags/CHANGES
http://secunia.com/advisories/28110	Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=202354
http://security.gentoo.org/glsa/glsa-200712-17.xml
http://www.securityfocus.com/bid/26892
http://secunia.com/advisories/28268	Vendor Advisory
http://www.debian.org/security/2008/dsa-1533
http://secunia.com/advisories/29580	Vendor Advisory
http://www.vupen.com/english/advisories/2007/4251	Vendor Advisory

Configuration 1

cpe:2.3:a:aertherwide:exiftags:0.80:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.96:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.93:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.98:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.99:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.94:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.92:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.90:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.95:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.97:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:0.91:*:*:*:*:*:*:* cpe:2.3:a:aertherwide:exiftags:*:*:*:*:*:*:*:*

---

Published : 2007-12-18 08:46

Updated : 2011-05-13 04:00

---

NVD link : CVE-2007-6355

Mitre link : CVE-2007-6355

No products.

CWE-189

NVD-CWE-noinfo