Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libexif | Libexif | * | 0.6.16 (including) |
| Red Hat Enterprise Linux 4 | RedHat | libexif-0:0.5.12-5.1.0.2.el4_6.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | libexif-0:0.6.13-4.0.2.el5_1.1 | * |
| Libexif | Ubuntu | dapper | * |
| Libexif | Ubuntu | edgy | * |
| Libexif | Ubuntu | feisty | * |
| Libexif | Ubuntu | gutsy | * |
| Libexif | Ubuntu | upstream | * |