CVE-2007-6352

MEDIUM 6.8CVE-2007-6352 · Published 20/12/2007 · updated 16/06/2026

In short

CVE-2007-6352 is a MEDIUM (CVSS 6.8) vulnerability affecting libexif (libexif).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 86.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
libexif libexif	`≤ 0.6.16`	No fix yet

Description

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

References

bugs.gentoo.org/show_bug.cgi
osvdb.org/42653
secunia.com/advisories/28076 · Vendor Advisory
secunia.com/advisories/28127 · Vendor Advisory
secunia.com/advisories/28195 · Vendor Advisory
secunia.com/advisories/28266 · Vendor Advisory
secunia.com/advisories/28346 · Vendor Advisory
secunia.com/advisories/28400 · Vendor Advisory
secunia.com/advisories/28636 · Vendor Advisory
secunia.com/advisories/28776 · Vendor Advisory
secunia.com/advisories/29381 · Vendor Advisory
secunia.com/advisories/32274 · Vendor Advisory
security.gentoo.org/glsa/glsa-200712-15.xml
sunsolve.sun.com/search/document.do

More vulnerabilities in libexif

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

libexif

≤ 0.6.16

No fix yet

More vulnerabilities in libexif

See all →