{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/75984?format=json","vulnerability_id":"VCID-xd62-ke4z-v3hp","summary":"Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.","aliases":[{"alias":"CVE-2007-2645"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/101705?format=json","purl":"pkg:deb/debian/libexif@0.6.15-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.15-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/5062?format=json","purl":"pkg:deb/debian/libexif@0.6.16-2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.16-2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/101698?format=json","purl":"pkg:deb/debian/libexif@0.6.22-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.22-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101696?format=json","purl":"pkg:deb/debian/libexif@0.6.24-1%2Bdeb12u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.24-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101701?format=json","purl":"pkg:deb/debian/libexif@0.6.25-1%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.25-1%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101699?format=json","purl":"pkg:deb/debian/libexif@0.6.26-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.26-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/190794?format=json","purl":"pkg:ebuild/media-libs/libexif@0.6.15","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/libexif@0.6.15"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/5058?format=json","purl":"pkg:deb/debian/libexif@0.5.0-1woody1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-2n34-t4fw-5ycv"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.5.0-1woody1"},{"url":"http://public2.vulnerablecode.io/api/packages/5059?format=json","purl":"pkg:deb/debian/libexif@0.6.9-6sarge2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.9-6sarge2"},{"url":"http://public2.vulnerablecode.io/api/packages/5060?format=json","purl":"pkg:deb/debian/libexif@0.6.13-5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.13-5"},{"url":"http://public2.vulnerablecode.io/api/packages/5061?format=json","purl":"pkg:deb/debian/libexif@0.6.13-5etch2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.13-5etch2"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2645.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2645.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-2645","reference_id":"","reference_type":"","scores":[{"value":"0.3209","scoring_system":"epss","scoring_elements":"0.96918","published_at":"2026-06-04T12:55:00Z"},{"value":"0.3209","scoring_system":"epss","scoring_elements":"0.96923","published_at":"2026-06-05T12:55:00Z"},{"value":"0.3209","scoring_system":"epss","scoring_elements":"0.96927","published_at":"2026-06-08T12:55:00Z"},{"value":"0.3209","scoring_system":"epss","scoring_elements":"0.96928","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-2645"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2645"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=240055","reference_id":"240055","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=240055"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=424775","reference_id":"424775","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=424775"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/30024.txt","reference_id":"CVE-2007-2645;OSVDB-35978","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/30024.txt"},{"reference_url":"https://www.securityfocus.com/bid/23927/info","reference_id":"CVE-2007-2645;OSVDB-35978","reference_type":"exploit","scores":[],"url":"https://www.securityfocus.com/bid/23927/info"},{"reference_url":"https://security.gentoo.org/glsa/200706-01","reference_id":"GLSA-200706-01","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200706-01"},{"reference_url":"https://usn.ubuntu.com/471-1/","reference_id":"USN-471-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/471-1/"}],"weaknesses":[],"exploits":[{"date_added":"2007-05-11","description":"LibEXIF 0.6.x - Exif_Data_Load_Data_Entry Remote Integer Overflow","required_action":null,"due_date":null,"notes":null,"known_ransomware_campaign_use":true,"source_date_published":"2007-05-11","exploit_type":"dos","platform":"linux","source_date_updated":"2013-12-07","data_source":"Exploit-DB","source_url":"https://www.securityfocus.com/bid/23927/info"}],"severity_range_score":null,"exploitability":"2.0","weighted_severity":"0.3","risk_score":0.6,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xd62-ke4z-v3hp"}