{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/75985?format=json","vulnerability_id":"VCID-bm6g-ursf-dfh5","summary":"libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.","aliases":[{"alias":"CVE-2007-6351"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/5062?format=json","purl":"pkg:deb/debian/libexif@0.6.16-2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.16-2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/101706?format=json","purl":"pkg:deb/debian/libexif@0.6.16-2.1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.16-2.1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101698?format=json","purl":"pkg:deb/debian/libexif@0.6.22-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.22-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101696?format=json","purl":"pkg:deb/debian/libexif@0.6.24-1%2Bdeb12u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.24-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101701?format=json","purl":"pkg:deb/debian/libexif@0.6.25-1%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.25-1%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/101699?format=json","purl":"pkg:deb/debian/libexif@0.6.26-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.26-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/192841?format=json","purl":"pkg:ebuild/media-libs/libexif@0.6.16-r1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/libexif@0.6.16-r1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/5058?format=json","purl":"pkg:deb/debian/libexif@0.5.0-1woody1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-2n34-t4fw-5ycv"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.5.0-1woody1"},{"url":"http://public2.vulnerablecode.io/api/packages/5059?format=json","purl":"pkg:deb/debian/libexif@0.6.9-6sarge2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.9-6sarge2"},{"url":"http://public2.vulnerablecode.io/api/packages/5060?format=json","purl":"pkg:deb/debian/libexif@0.6.13-5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.13-5"},{"url":"http://public2.vulnerablecode.io/api/packages/5061?format=json","purl":"pkg:deb/debian/libexif@0.6.13-5etch2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1hcz-pb63-xbdg"},{"vulnerability":"VCID-1qye-wx7e-puda"},{"vulnerability":"VCID-22jn-mcwn-j3ax"},{"vulnerability":"VCID-342b-qpcn-w3df"},{"vulnerability":"VCID-44bu-3z7v-5ydx"},{"vulnerability":"VCID-46rf-wxth-xbh1"},{"vulnerability":"VCID-62d1-kaq2-h3d9"},{"vulnerability":"VCID-6jqb-s4w9-y3af"},{"vulnerability":"VCID-713z-wx2h-53ff"},{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-bwmt-7yhf-zugp"},{"vulnerability":"VCID-ceaj-6s1m-3yak"},{"vulnerability":"VCID-ebpx-bczb-z3b2"},{"vulnerability":"VCID-fwj4-n4af-wued"},{"vulnerability":"VCID-g1pr-mb2d-d3aj"},{"vulnerability":"VCID-g856-qmgw-fbca"},{"vulnerability":"VCID-huqq-ss1g-jue2"},{"vulnerability":"VCID-hvg9-7hrw-87a2"},{"vulnerability":"VCID-hyj8-tmtk-h7ds"},{"vulnerability":"VCID-j5mu-rdx7-zug2"},{"vulnerability":"VCID-kmqk-uta9-83e7"},{"vulnerability":"VCID-p9wb-yye6-pugf"},{"vulnerability":"VCID-phh9-yvjg-nygr"},{"vulnerability":"VCID-senj-exhy-uuek"},{"vulnerability":"VCID-v2pe-r74z-fucm"},{"vulnerability":"VCID-whjm-923v-xyah"},{"vulnerability":"VCID-xd62-ke4z-v3hp"},{"vulnerability":"VCID-zudh-dpue-3qba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libexif@0.6.13-5etch2"},{"url":"http://public2.vulnerablecode.io/api/packages/186728?format=json","purl":"pkg:rpm/redhat/libexif@0.6.13-4.0.2.el5_1?arch=1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bm6g-ursf-dfh5"},{"vulnerability":"VCID-ebpx-bczb-z3b2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libexif@0.6.13-4.0.2.el5_1%3Farch=1"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6351.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6351.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-6351","reference_id":"","reference_type":"","scores":[{"value":"0.0445","scoring_system":"epss","scoring_elements":"0.89251","published_at":"2026-06-04T12:55:00Z"},{"value":"0.0445","scoring_system":"epss","scoring_elements":"0.89269","published_at":"2026-06-07T12:55:00Z"},{"value":"0.0445","scoring_system":"epss","scoring_elements":"0.8927","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-6351"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6351","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6351"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=425551","reference_id":"425551","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=425551"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457330","reference_id":"457330","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457330"},{"reference_url":"https://security.gentoo.org/glsa/200712-15","reference_id":"GLSA-200712-15","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200712-15"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1165","reference_id":"RHSA-2007:1165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1165"},{"reference_url":"https://usn.ubuntu.com/654-1/","reference_id":"USN-654-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/654-1/"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bm6g-ursf-dfh5"}