What’s Vulnerable › Vulnerabilities

CVE-2007-6352

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-12-20 · updated 2026-06-16
• Weakness: CWE-189

Description

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Affected products

• Libexif: through 0.6.16

References

• http://bugs.gentoo.org/show_bug.cgi?id=202350
• http://osvdb.org/42653
• http://secunia.com/advisories/28076
• http://secunia.com/advisories/28127
• http://secunia.com/advisories/28195
• http://secunia.com/advisories/28266
• http://secunia.com/advisories/28346
• http://secunia.com/advisories/28400
• http://secunia.com/advisories/28636
• http://secunia.com/advisories/28776
• http://secunia.com/advisories/29381
• http://secunia.com/advisories/32274

Get alerted when CVE-2007-6352 or the next vulnerability affects your stack