CVE-2006-4168 - CVE House
Back to Database
Status published Medium CVE-2006-4168

Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif...

Vulnerability Description

Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4168

Credits & Attribution

No credits recorded in the NVD database.

References

More from libexif

View All →
CVE-2007-6352
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers...
Medium 6.8
CVE-2007-2645
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif...
Critical 9.3
CVE-2005-0664
Buffer overflow in the EXIF library (libexif) 0.6.9 does not...
Low 2.6

Affected Vendor

Affected Software

libexif
Vulnerable Versions:
0.6.9, 0.6.11, 0.6.12, 0.6.13, 0.6.14, 0.6.15

Timeline

Official Publish: June 14th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.