Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-4168HistoryJun 14, 2007 - 7:30 p.m.
CVE-2006-4168
2007-06-1419:30:00
Debian Security Bug Tracker
security-tracker.debian.org
15
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.261
Percentile
96.7%
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libexif | < 0.6.16-1 | libexif_0.6.16-1_all.deb |
| Debian | 11 | all | libexif | < 0.6.16-1 | libexif_0.6.16-1_all.deb |
| Debian | 999 | all | libexif | < 0.6.16-1 | libexif_0.6.16-1_all.deb |
| Debian | 13 | all | libexif | < 0.6.16-1 | libexif_0.6.16-1_all.deb |
Related
ubuntu
ubuntu
libexif vulnerability
2007-06-27 00:00:00
cve
cve
CVE-2006-4168
2007-06-14 19:30:00
CVE-2007-4168
2007-06-20 23:30:00
openvas
openvas
Mandriva Update for libexif MDKSA-2007:128 (libexif)
2009-04-09 00:00:00
Fedora Update for libexif FEDORA-2007-605
2009-02-27 00:00:00
Ubuntu: Security Advisory (USN-478-1)
2009-03-23 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : libexif (MDKSA-2007:128)
2007-06-21 00:00:00
GLSA-200706-09 : libexif: Buffer overflow
2007-06-27 00:00:00
Debian DSA-1310-1 : libexif - integer overflow
2007-06-18 00:00:00
debian
debian
[SECURITY] [DSA 1309-1] New libexif packages fix integer overflow
2007-06-16 23:23:43
[SECURITY] [DSA 1310-1] New libexif packages fix integer overflow
2007-06-16 23:24:15
securityvulns
securityvulns
nvd
nvd
CVE-2006-4168
2007-06-14 19:30:00
CVE-2007-4168
2007-06-20 23:30:00
ubuntucve
ubuntucve
CVE-2006-4168
2007-06-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:16:02
gentoo
gentoo
libexif: Buffer overflow
2007-06-26 00:00:00
cvelist
cvelist
CVE-2006-4168
2007-06-14 19:00:00
centos
centos
libexif security update
2007-06-16 06:38:10
redhat
redhat
(RHSA-2007:0501) Moderate: libexif integer overflow
2007-06-14 00:00:00
oraclelinux
oraclelinux
Moderate: libexif security update: integer overflow
2007-06-14 00:00:00
suse
suse
remote denial of service in libexif
2007-07-03 17:45:54
prion
prion
Design/Logic Flaw
2007-06-20 23:30:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.261
Percentile
96.7%
Related for DEBIANCVE:CVE-2006-4168