CVE-2005-0664
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of...
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
CVE-2005-0664- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
CVE-2005-0664- Updated
- 2026-11-02
EUVDEUVD-2005-0665 No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
EUVD-2005-0665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gvww-3fhc-2r58 No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of...
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
GHSA-gvww-3fhc-2r58- Updated
- 2026-11-02
OSV No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
CVE-2005-0664- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0664 No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
DEBIAN-CVE-2005-0664- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libexifDebian:12 |
before 0.6.9-5 | 0.6.9-5 |
libexifDebian:13 |
before 0.6.9-5 | 0.6.9-5 |
libexifDebian:14 |
before 0.6.9-5 | 0.6.9-5 |
libexifDebian:3.0 |
before 0.5.0-1woody1, plus listed versions 0.5.0-1 |
0.5.0-1woody1 |
libexifRed Hat:enterprise_linux:4::as |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::as |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexifRed Hat:enterprise_linux:4::desktop |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::desktop |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libexifRed Hat:enterprise_linux:4::es |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::es |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexifRed Hat:enterprise_linux:4::ws |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::ws |
before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0664 is a low vulnerability (CVSS 2.6) in Libexif, published March 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. Fixed in libexif 0.6.9-5.
References
securitytracker.com/id?1013398
sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1
debian.org/security/2005/dsa-709
usn.ubuntu.com/91-1
gentoo.org/security/en/glsa/glsa-200503-17.xml
vupen.com/english/advisories/2005/0240
Show 16 moreShow less
bugzilla.ubuntu.com/show_bug.cgi?id=7152
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832
secunia.com/advisories/17705
mandriva.com/security/advisories?name=MDKSA-2005:064
redhat.com/support/errata/RHSA-2005-300.html
nvd.nist.gov/vuln/detail/CVE-2005-0664
github.com/advisories/GHSA-gvww-3fhc-2r58
security-tracker.debian.org/tracker/CVE-2005-0664
access.redhat.com/errata/RHSA-2005:300
bugzilla.redhat.com/show_bug.cgi?id=150503
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_300.json
cve.org/CVERecord?id=CVE-2005-0664