PublicDate: 2007-05-14 21:19:00 UTC Candidate: CVE-2007-2645 References: https://ubuntu.com/security/notices/USN-471-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645 Description: Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_libexif: released (0.6.12-2ubuntu0.2) edgy_libexif: released (0.6.13-4ubuntu0.2) feisty_libexif: released (0.6.13-5ubuntu0.2) devel_libexif: released (0.6.16-1) upstream_libexif: needs-triage