CVE-2006-4168

2007-06-1419:30:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.261

Percentile

96.7%

JSON

Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.

Affected configurations

Nvd

Node

libexiflibexifMatch0.6.9

libexiflibexifMatch0.6.11

libexiflibexifMatch0.6.12

libexiflibexifMatch0.6.13

libexiflibexifMatch0.6.14

libexiflibexifMatch0.6.15

VendorProductVersionCPE
libexiflibexif0.6.9cpe:2.3:a:libexif:libexif:0.6.9:*:*:*:*:*:*:*
libexiflibexif0.6.11cpe:2.3:a:libexif:libexif:0.6.11:*:*:*:*:*:*:*
libexiflibexif0.6.12cpe:2.3:a:libexif:libexif:0.6.12:*:*:*:*:*:*:*
libexiflibexif0.6.13cpe:2.3:a:libexif:libexif:0.6.13:*:*:*:*:*:*:*
libexiflibexif0.6.14cpe:2.3:a:libexif:libexif:0.6.14:*:*:*:*:*:*:*
libexiflibexif0.6.15cpe:2.3:a:libexif:libexif:0.6.15:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libexif	libexif	0.6.9	cpe:2.3:a:libexif:libexif:0.6.9:::::::*
libexif	libexif	0.6.11	cpe:2.3:a:libexif:libexif:0.6.11:::::::*
libexif	libexif	0.6.12	cpe:2.3:a:libexif:libexif:0.6.12:::::::*
libexif	libexif	0.6.13	cpe:2.3:a:libexif:libexif:0.6.13:::::::*
libexif	libexif	0.6.14	cpe:2.3:a:libexif:libexif:0.6.14:::::::*
libexif	libexif	0.6.15	cpe:2.3:a:libexif:libexif:0.6.15:::::::*