CVE-2007-6353

Опубликовано: 20 дек. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

Ссылки

http://bugs.gentoo.org/show_bug.cgi?id=202351
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
Mailing List
Third Party Advisory
http://secunia.com/advisories/28132
Broken Link
http://secunia.com/advisories/28178
Broken Link
http://secunia.com/advisories/28267
Broken Link
http://secunia.com/advisories/28412
Broken Link
http://secunia.com/advisories/28610
Broken Link
http://secunia.com/advisories/32273
Broken Link
http://security.gentoo.org/glsa/glsa-200712-16.xml
Third Party Advisory
http://www.debian.org/security/2008/dsa-1474
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:006
Broken Link
http://www.securityfocus.com/bid/26918
Broken Link
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-655-1
Third Party Advisory
http://www.vupen.com/english/advisories/2007/4252
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=425921
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39118
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00652.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00674.html
Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=202351
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*

Версия до 0.16 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.0234

Низкий

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2007-6353

ubuntu

больше 17 лет назад

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

CVE-2007-6353

debian

больше 17 лет назад

Integer overflow in exif.cpp in exiv2 library allows context-dependent ...

GHSA-g589-q56x-4rhp

github

больше 3 лет назад

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

BDU:2015-03723

fstec

больше 10 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

BDU:2015-03722

fstec

больше 10 лет назад

EPSS

Процентиль: 84%

0.0234

Низкий

7.5 High

CVSS2

Дефекты

CWE-190