CVE-2005-0664
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of...
CVE-2005-0664 is a low vulnerability (CVSS 2.6) in Libexif, published March 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. Fixed in libexif 0.6.9-5.
- Severity
- 2.6 LowCVSS 2.0, NVD
- Exploit chance
- 4.46%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.6.9-5libexif +15 more
Description
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libexifDebian:12 | before 0.6.9-5 | 0.6.9-5 |
libexifDebian:13 | before 0.6.9-5 | 0.6.9-5 |
libexifDebian:14 | before 0.6.9-5 | 0.6.9-5 |
libexifDebian:3.0 | before 0.5.0-1woody1, plus listed versions 0.5.0-1 | 0.5.0-1woody1 |
libexifRed Hat:enterprise_linux:4::as | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::as | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::as | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexifRed Hat:enterprise_linux:4::desktop | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::desktop | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libexifRed Hat:enterprise_linux:4::es | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::es | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::es | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexifRed Hat:enterprise_linux:4::ws | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-debuginfoRed Hat:enterprise_linux:4::ws | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
libexif-develRed Hat:enterprise_linux:4::ws | before 0:0.5.12-5.1 | 0:0.5.12-5.1 |
What each source reports
NVD Score used
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
CVE-2005-0664- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
CVE-2005-0664- Updated
- 2026-11-02
EUVDEUVD-2005-0665No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
EUVD-2005-0665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gvww-3fhc-2r58No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of...
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
GHSA-gvww-3fhc-2r58- Updated
- 2026-11-02
OSVNo score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
CVE-2005-0664- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0664No score
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
- Record
DEBIAN-CVE-2005-0664- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1013398
sunsolve.sun.com/search/document.do?assetkey=1-26-102041-1
debian.org/security/2005/dsa-709
usn.ubuntu.com/91-1
gentoo.org/security/en/glsa/glsa-200503-17.xml
vupen.com/english/advisories/2005/0240
Show 16 moreShow less
bugzilla.ubuntu.com/show_bug.cgi?id=7152
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10832
secunia.com/advisories/17705
mandriva.com/security/advisories?name=MDKSA-2005:064
redhat.com/support/errata/RHSA-2005-300.html
nvd.nist.gov/vuln/detail/CVE-2005-0664
github.com/advisories/GHSA-gvww-3fhc-2r58
security-tracker.debian.org/tracker/CVE-2005-0664
access.redhat.com/errata/RHSA-2005:300
bugzilla.redhat.com/show_bug.cgi?id=150503
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_300.json
cve.org/CVERecord?id=CVE-2005-0664