CVE-2005-0664Improper Restriction of Operations within the Bounds of a Memory Buffer in Libexif

7 documents7 sources
Severity
2.6LOWNVD
EPSS
3.1%
top 13.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 2
Latest updateMay 1

Description

Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.

CVSS vector

AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9

Affected Packages2 packages

Debianlibexif_project/libexif< 0.6.9-5+3
NVDlibexif/libexif0.6.9

Patches

🔴Vulnerability Details

3
GHSA
GHSA-gvww-3fhc-2r58: Buffer overflow in the EXIF library (libexif) 02022-05-01
OSV
CVE-2005-0664: Buffer overflow in the EXIF library (libexif) 02005-05-02
CVEList
CVE-2005-0664: Buffer overflow in the EXIF library (libexif) 02005-03-08

📋Vendor Advisories

2
Debian
CVE-2005-0664: libexif - Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate t...2005
Red Hat
security flaw2004-03-03

💬Community

1
Bugzilla
CVE-2005-0664 security flaw2018-08-16
CVE-2005-0664 — Libexif vulnerability | cvebase