CVE-2007-6356
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive...
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
Exploit likelihood
What each source reports
NVD Score used
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
- Record
CVE-2007-6356- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
- Record
CVE-2007-6356- Updated
- 2026-11-02
EUVDEUVD-2007-6323 No score
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
- Record
EUVD-2007-6323- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q864-8vr4-46qc No score
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive...
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
- Record
GHSA-q864-8vr4-46qc- Updated
- 2026-11-02
OSV No score
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
- Record
CVE-2007-6356- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6356 No score
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
- Record
DEBIAN-CVE-2007-6356- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exiftagsDebian:12 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:13 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:14 |
before 1.01-0.1 | 1.01-0.1 |
exiftagsDebian:4.0 From an advisory covering 3 CVEs |
before 0.98-1.1+etch1, plus listed versions 0.98-10.98-1.1+0sarge1 |
0.98-1.1+etch1 |
exiftagsDebian:3.1 From an advisory covering 3 CVEs |
before 0.98-1.1+0sarge1, plus listed versions 0.98-1 |
0.98-1.1+0sarge1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6356 is a medium vulnerability (CVSS 5.0) in Aertherwide Exiftags, published December 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 79th percentile. Fixed in exiftags 1.01-0.1.