Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

exiftags before 1.01 can cause program crash

CVE-2007-6355 · published 18 years ago
Summary

The exiftags utility in versions prior to 1.01 may miscalculate data sizes, leading to an illegal memory access that can make the program stop working or behave unpredictably. This could let an attacker cause a crash or potentially run code on the affected system. Update exiftags to version 1.01 or newer to eliminate the risk.

What to do
  • Update debian exiftags to version 1.01-0.1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian exiftags < 1.01-0.1
Fix: upgrade to 1.01-0.1
Debian:13 debian exiftags < 1.01-0.1
Fix: upgrade to 1.01-0.1
Debian:14 debian exiftags < 1.01-0.1
Fix: upgrade to 1.01-0.1
– aertherwide exiftags <= 1.00
0.80
0.90
0.91
0.92
0.93
0.94
0.95
0.96
0.97
0.98
0.99
cpe:2.3:a:aertherwide:exiftags:*:*:*:*:*:*:*:*
Original advisory text
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE...
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
References
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-189Numeric Errors
Timeline
Published18 Dec 2007
Updated4 Nov 2026
First seen28 Sep 2026
Sources
DEBIAN-CVE-2007-6355 · OSV
CVE-2007-6355 · NVD
Track software like this
Free during beta