CVE-2007-6353
EPSS 2.3%exiv2 - arbitrary code execution
發布日:2007/12/20修改日:2026/4/28
也稱為:DEBIAN-CVE-2007-6353
描述
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
受影響套件(2)
- Debian/exiv2from 0, < 0.15-2
- Debian/exiv2from 0, < 0.10-1.5