CVE-2007-6351

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.

🔗 References (58)

• cve@mitrehttp://bugs.gentoo.org/show_bug.cgi?id=202350
• cve@mitrehttp://osvdb.org/42652
• cve@mitrehttp://secunia.com/advisories/28076
• cve@mitrehttp://secunia.com/advisories/28127
• cve@mitrehttp://secunia.com/advisories/28195
• cve@mitrehttp://secunia.com/advisories/28266
• cve@mitrehttp://secunia.com/advisories/28346
• cve@mitrehttp://secunia.com/advisories/28400
• cve@mitrehttp://secunia.com/advisories/28636
• cve@mitrehttp://secunia.com/advisories/28776
• cve@mitrehttp://secunia.com/advisories/32274
• cve@mitrehttp://security.gentoo.org/glsa/glsa-200712-15.xml
• cve@mitrehttp://www.debian.org/security/2008/dsa-1487
• cve@mitrehttp://www.mandriva.com/security/advisories?name=MDVSA-2008:005
• cve@mitrehttp://www.novell.com/linux/security/advisories/suse_security_summary_report.html