VDB

CVE-2007-6354

CVE-2007-6354 PUBLISHED

Reported by mitre · Published December 18, 2007

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
exiftagsaertherwide1.00

Affected products

VendorProductVersions
n/an/an/a
n/an/a*

Timeline

  • Dec 18, 2007 CVE Published
  • Feb 4, 2022 EPSS Score (30 in total, the first dated here)
  • Apr 8, 2026 Distribution Patch
  • Apr 8, 2026 Security Advisory (3 in total, the first dated here)
  • Apr 23, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2007-6354
vulnetix vdb fixes CVE-2007-6354

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2007-6354/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • 29580 third-party-advisoryx_refsource_SECUNIA
  • x_refsource_MISC
  • 28110 third-party-advisoryx_refsource_SECUNIA
  • DSA-1533 vendor-advisoryx_refsource_DEBIAN
  • 28268 third-party-advisoryx_refsource_SECUNIA
  • GLSA-200712-17 vendor-advisoryx_refsource_GENTOO
  • ADV-2007-4251 vdb-entryx_refsource_VUPEN
  • x_refsource_CONFIRM
  • 26892 vdb-entryx_refsource_BID
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›