CVE-2007-6352

Publication date 20 December 2007

Last updated 24 July 2024

Ubuntu priority

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libexif	8.04 LTS hardy	Not affected
	7.10 gutsy	Fixed 0.6.16-1ubuntu0.1
	7.04 feisty	Fixed 0.6.13-5ubuntu0.3
	6.10 edgy	Ignored end of life
	6.06 LTS dapper	Fixed 0.6.12-2ubuntu0.3

How can I get the fixes?
What do statuses mean?
Patch details

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libexif	Vendor: http://patch-tracking.debian.net/patch/series/view/libexif/0.6.16-2.1/CVE-2007-6352

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-654-1
libexif vulnerabilities
14 October 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2007-6352