CVE-2007-6355
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a ...
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
- Record
CVE-2007-6355- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
- Record
CVE-2007-6355- Updated
- 2026-11-02
EUVDEUVD-2007-6322 No score
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
- Record
EUVD-2007-6322- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pg5q-fr6h-gjf4 No score
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a ...
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
- Record
GHSA-pg5q-fr6h-gjf4- Updated
- 2026-11-02
OSV No score
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
- Record
CVE-2007-6355- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6355 No score
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
- Record
DEBIAN-CVE-2007-6355- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exiftagsDebian:12 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:13 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:14 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:4.0 From an advisory covering 3 CVEs |
before 0.98-1.1+etch1, plus listed versions 0.98-10.98-1.1+0sarge1 |
0.98-1.1+etch1 |
exiftagsDebian:3.1 From an advisory covering 3 CVEs |
before 0.98-1.1+0sarge1, plus listed versions 0.98-1 |
0.98-1.1+0sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6355 is a high vulnerability (CVSS 10.0) in Aertherwide Exiftags, published December 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.12%, the 81st percentile. Fixed in exiftags 1.01-0.1.