CVE-2007-6351

Description

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.

How to fix CVE-2007-6351

To remediate CVE-2007-6351, upgrade the affected package to a fixed version below.

• Debian/libexif—upgrade to 0.6.16-2.1 or later

Is CVE-2007-6351 being exploited?

Low — EPSS is 4.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.6.16-2.1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2007-6351