Every CVESearch/Get API key

CVE-2007-6352

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute...

6.8 MediumFix available

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Exploit likelihood

2.73%Down 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.8

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Record
CVE-2007-6352
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Record
CVE-2007-6352
Updated
2026-11-02
EUVDEUVD-2007-6319No score

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Record
EUVD-2007-6319
Updated
2026-11-03
GitHub AdvisoriesGHSA-wpmg-rx8c-q5g8No score

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute...

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Record
GHSA-wpmg-rx8c-q5g8
Updated
2026-11-02
OSVNo score

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Record
CVE-2007-6352
Updated
2026-11-02
OSVDEBIAN-CVE-2007-6352No score

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

Record
DEBIAN-CVE-2007-6352
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libexif
Debian:12
before 0.6.16-2.1
0.6.16-2.1
libexif
Debian:13
before 0.6.16-2.1
0.6.16-2.1
libexif
Debian:14
before 0.6.16-2.1
0.6.16-2.1
libexif
Debian:3.1
From an advisory covering 3 CVEs
before 0.6.9-6sarge2, plus listed versions
0.6.9-60.6.9-6sarge1
0.6.9-6sarge2
libexif
Debian:4.0
From an advisory covering 3 CVEs
before 0.6.13-5etch2, plus listed versions
0.6.13-50.6.13-5etch1
0.6.13-5etch2
libexif
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
Show 15 moreShow less
Affected packages
PackageAffectedFixed
libexif
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:0.6.13-4.0.2.el5_1.1
0:0.6.13-4.0.2.el5_1.1
libexif
Red Hat:enterprise_linux:4::as
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-debuginfo
Red Hat:enterprise_linux:4::as
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-devel
Red Hat:enterprise_linux:4::as
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif
Red Hat:enterprise_linux:4::desktop
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-devel
Red Hat:enterprise_linux:4::desktop
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif
Red Hat:enterprise_linux:4::es
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-debuginfo
Red Hat:enterprise_linux:4::es
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-devel
Red Hat:enterprise_linux:4::es
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif
Red Hat:enterprise_linux:4::ws
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1
libexif-devel
Red Hat:enterprise_linux:4::ws
before 0:0.5.12-5.1.0.2.el4_6.1
0:0.5.12-5.1.0.2.el4_6.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6352 is a medium vulnerability (CVSS 6.8) in Libexif, published December 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in libexif 0.6.16-2.1.

References

Show 42 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open