CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://bugs.gentoo.org/show_bug.cgi?id=202354
http://johnst.org/sw/exiftags/CHANGES
http://secunia.com/advisories/28110	Vendor Advisory
http://secunia.com/advisories/28268	Vendor Advisory
http://secunia.com/advisories/29580	Vendor Advisory
http://security.gentoo.org/glsa/glsa-200712-17.xml
http://www.debian.org/security/2008/dsa-1533
http://www.securityfocus.com/bid/26892
http://www.vupen.com/english/advisories/2007/4251	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:aertherwide:exiftags::::::::
	cpe:2.3:a:aertherwide:exiftags:0.80:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.90:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.91:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.92:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.93:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.94:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.95:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.96:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.97:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.98:::::::*
	cpe:2.3:a:aertherwide:exiftags:0.99:::::::*

History

No history.

Information

Published : 2007-12-18 20:46

Updated : 2011-05-13 04:00

NVD link : CVE-2007-6355

Mitre link : CVE-2007-6355

CVE.ORG link : CVE-2007-6355

JSON object : View

Products Affected

aertherwide

exiftags

CWE

CWE-189

Numeric Errors

NVD-CWE-noinfo

{"id": "CVE-2007-6355", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-12-18T20:46:00.000", "references": [{"url": "http://bugs.gentoo.org/show_bug.cgi?id=202354", "source": "cve@mitre.org"}, {"url": "http://johnst.org/sw/exiftags/CHANGES", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28110", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28268", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29580", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200712-17.xml", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2008/dsa-1533", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26892", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/4251", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-189"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a \"field offset overflow\" that triggers an \"illegal memory access,\" a different vulnerability than CVE-2007-6354."}, {"lang": "es", "value": "Un desbordamiento de enteros en exiftags versiones anteriores a 1.01, presenta un impacto desconocido y vectores de ataque, como resultado de un \u201cfield offset overflow\u201d que desencadena un \"illegal memory access\", una vulnerabilidad diferente de CVE-2007-6354.<"}], "lastModified": "2011-05-13T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aertherwide:exiftags:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C95CE0B7-B08B-4993-AD99-966673FDC777", "versionEndIncluding": "1.00"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.80:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E407073E-F156-489D-B5BC-14CA94FAAB10"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49E978A6-A400-453B-A265-C9621642EFDE"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.91:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0203A28-8A25-4F87-A0A3-1AD8B1600738"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49B76D19-0652-4674-AE7E-F15A316E0005"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69676102-DBCD-4DAE-84A8-B9B4F85D1E4A"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.94:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7084C23B-D17A-46CB-BE0D-D8C41590C249"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.95:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ACB306A-A1E6-4C78-AA39-6EA813636782"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.96:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11EADB2A-2265-41B7-8BAC-CD0AF1D736AC"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.97:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14117D3D-B220-41C0-A973-F6B102D2ED23"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.98:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20A5C555-A093-48BD-A80A-354FC6EDB517"}, {"criteria": "cpe:2.3:a:aertherwide:exiftags:0.99:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37B4CB6C-9778-4E06-8EDD-063D9482B7FC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}