CVE-2007-6354
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors,...
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
- Record
CVE-2007-6354- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
- Record
CVE-2007-6354- Updated
- 2026-11-02
EUVDEUVD-2007-6321 No score
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
- Record
EUVD-2007-6321- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3mp5-972c-2h7x No score
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors,...
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
- Record
GHSA-3mp5-972c-2h7x- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
- Record
CVE-2007-6354- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6354 No score
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
- Record
DEBIAN-CVE-2007-6354- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exiftagsDebian:12 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:13 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:14 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:4.0 From an advisory covering 3 CVEs |
before 0.98-1.1+etch1, plus listed versions 0.98-10.98-1.1+0sarge1 |
0.98-1.1+etch1 |
exiftagsDebian:3.1 From an advisory covering 3 CVEs |
before 0.98-1.1+0sarge1, plus listed versions 0.98-1 |
0.98-1.1+0sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6354 is a high vulnerability (CVSS 10.0) in Aertherwide Exiftags, published December 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.64%, the 85th percentile. Fixed in exiftags 1.01-0.1.