libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libexif | Libexif_project | * | 0.6.16 (including) |
| Libexif | Libexif_project | 0.6.14 (including) | 0.6.14 (including) |
| Libexif | Libexif_project | 0.6.15 (including) | 0.6.15 (including) |
| Red Hat Enterprise Linux 5 | RedHat | libexif-0:0.6.13-4.0.2.el5_1.1 | * |
| Libexif | Ubuntu | dapper | * |
| Libexif | Ubuntu | edgy | * |
| Libexif | Ubuntu | feisty | * |
| Libexif | Ubuntu | gutsy | * |
| Libexif | Ubuntu | upstream | * |