FKIE_CVE-2006-4168

Vulnerability from fkie_nvd - Published: 2007-06-14 19:30 - Updated: 2026-06-16 22:28
Severity
Summary
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.
References
cve@mitre.orghttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=543Patch, Vendor Advisory
cve@mitre.orghttp://osvdb.org/35379
cve@mitre.orghttp://secunia.com/advisories/25642Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/25645
cve@mitre.orghttp://secunia.com/advisories/25674
cve@mitre.orghttp://secunia.com/advisories/25717/
cve@mitre.orghttp://secunia.com/advisories/25746
cve@mitre.orghttp://secunia.com/advisories/25768
cve@mitre.orghttp://secunia.com/advisories/25820
cve@mitre.orghttp://secunia.com/advisories/25842
cve@mitre.orghttp://secunia.com/advisories/25932
cve@mitre.orghttp://secunia.com/advisories/26083
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-200706-09.xml
cve@mitre.orghttp://sourceforge.net/project/shownotes.php?release_id=515385Patch
cve@mitre.orghttp://www.debian.org/security/2007/dsa-1310
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDKSA-2007:128
cve@mitre.orghttp://www.novell.com/linux/security/advisories/2007_14_sr.html
cve@mitre.orghttp://www.novell.com/linux/security/advisories/2007_39_libexif.html
cve@mitre.orghttp://www.securityfocus.com/archive/1/472046/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/24461
cve@mitre.orghttp://www.securitytracker.com/id?1018240
cve@mitre.orghttp://www.ubuntu.com/usn/usn-478-1
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/2165
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/34851
cve@mitre.orghttps://issues.rpath.com/browse/RPL-1482
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9349
cve@mitre.orghttps://rhn.redhat.com/errata/RHSA-2007-0501.html
af854a3a-2127-422b-91ae-364da2661108http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=543Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/35379
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25642Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25645
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25674
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25717/
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25746
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25768
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25820
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25842
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25932
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/26083
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200706-09.xml
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/project/shownotes.php?release_id=515385Patch
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2007/dsa-1310
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2007:128
af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2007_14_sr.html
af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2007_39_libexif.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/472046/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/24461
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1018240
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/usn-478-1
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/2165
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/34851
af854a3a-2127-422b-91ae-364da2661108https://issues.rpath.com/browse/RPL-1482
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9349
af854a3a-2127-422b-91ae-364da2661108https://rhn.redhat.com/errata/RHSA-2007-0501.html
Impacted products
Vendor Product Version
libexif libexif 0.6.9
libexif libexif 0.6.11
libexif libexif 0.6.12
libexif libexif 0.6.13
libexif libexif 0.6.14
libexif libexif 0.6.15
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libexif:libexif:0.6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4D77F97-C618-43D2-B769-BBA0DBD0F441",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libexif:libexif:0.6.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BD998A8-F573-494D-8059-6E374526E8AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libexif:libexif:0.6.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB7751B3-A9FF-4D76-8C9D-CC92F17B66A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libexif:libexif:0.6.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "58F183B8-C095-4240-8807-73F6B38EE98C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libexif:libexif:0.6.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "006A3051-2D2E-4271-82F4-682D54665880",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libexif:libexif:0.6.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "758F45F3-03F9-4F01-9A7D-12B6B1C2F9D6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de entero en la funci\u00f3n exif_data_load_data_entry en libexif/exif-data.c en Libexif anterior a 0.6.16 permite a atacantes remotos provocar denegaci\u00f3n de servicio (caida de aplicaci\u00f3n) o ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de una imagen con diferentes componentes EXIF, lo cual dispara un desbordamiento de b\u00fafer basado en pila."
    }
  ],
  "id": "CVE-2006-4168",
  "lastModified": "2026-06-16T22:28:32.713",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-06-14T19:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=543"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/35379"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25642"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25645"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25674"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25717/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25746"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25768"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25820"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25842"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/25932"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26083"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200706-09.xml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/project/shownotes.php?release_id=515385"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2007/dsa-1310"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:128"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2007_39_libexif.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/472046/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24461"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018240"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-478-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2165"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34851"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://issues.rpath.com/browse/RPL-1482"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9349"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://rhn.redhat.com/errata/RHSA-2007-0501.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=543"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/35379"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/25642"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25645"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25674"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25717/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25746"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25768"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25820"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25842"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/25932"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26083"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200706-09.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/project/shownotes.php?release_id=515385"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2007/dsa-1310"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:128"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_39_libexif.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/472046/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24461"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018240"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-478-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2165"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34851"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1482"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9349"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://rhn.redhat.com/errata/RHSA-2007-0501.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.