CVE-2007-2645: Integer Overflow
Integer overflow in the exifdataloaddataentry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2645?
CVE-2007-2645 has been classified as a high severity vulnerability due to its potential for causing denial of service and executing arbitrary code.
How do I fix CVE-2007-2645?
To fix CVE-2007-2645, upgrade to libexif version 0.6.14 or later.
What versions of libexif are affected by CVE-2007-2645?
CVE-2007-2645 affects libexif versions 0.5, 0.5.12, 0.6.9, 0.6.11, 0.6.12, and 0.6.13.
Can CVE-2007-2645 be exploited remotely?
Yes, CVE-2007-2645 can be exploited remotely by attackers using crafted EXIF data.
What are the primary effects of CVE-2007-2645?
The primary effects of CVE-2007-2645 include potential denial of service through application crashes and the risk of arbitrary code execution.