CVE-2007-6351: Medium severity Libexif Project Libexif vulnerability
An infinite recursion flaw was found in libexif. This could be leveraged by an attacker to crash an application using libexif to process image data content.
Other sources
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exifloaderwrite function in exifloader.c.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-6351?
CVE-2007-6351 is classified as a denial of service vulnerability due to its potential to cause infinite recursion in applications using libexif.
How do I fix CVE-2007-6351?
To fix CVE-2007-6351, you should upgrade libexif to version 0.6.17 or later.
What versions of libexif are affected by CVE-2007-6351?
CVE-2007-6351 affects libexif versions 0.6.16 and earlier.
What types of attacks can exploit CVE-2007-6351?
CVE-2007-6351 can be exploited by context-dependent attackers to crash applications that process specially crafted image files.
Is there a workaround for CVE-2007-6351?
There are no documented workarounds for CVE-2007-6351 other than upgrading to a patched version of libexif.