Read the docs
TI-2007-06061 Aliases CVE-2007-6354GHSA-3mp5-972c-2h7x

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors…

Priority MEDIUM 48Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.

Why it matters now

EPSS 0.0264 85th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:aertherwide:exiftags:*:*:*:*:*:*:*:*up to 1.00VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.80:*:*:*:*:*:*:*0.80VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.90:*:*:*:*:*:*:*0.90VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.91:*:*:*:*:*:*:*0.91VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.92:*:*:*:*:*:*:*0.92VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.93:*:*:*:*:*:*:*0.93VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.94:*:*:*:*:*:*:*0.94VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.95:*:*:*:*:*:*:*0.95VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.96:*:*:*:*:*:*:*0.96VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.97:*:*:*:*:*:*:*0.97VulnerableAertherwide
  • cpe:2.3:a:aertherwide:exiftags:*:*:*:*:*:*:*:* Versions up to 1.00 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.80:*:*:*:*:*:*:* Versions 0.80 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.95:*:*:*:*:*:*:* Versions 0.95 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.97:*:*:*:*:*:*:* Versions 0.97 Vulnerable ·Aertherwide
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:aertherwide:exiftags:0.98:*:*:*:*:*:*:*0.98VulnerableAertherwide
cpe:2.3:a:aertherwide:exiftags:0.99:*:*:*:*:*:*:*0.99VulnerableAertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.98:*:*:*:*:*:*:* Versions 0.98 Vulnerable ·Aertherwide
  • cpe:2.3:a:aertherwide:exiftags:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·Aertherwide

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-6354
  2. 2026-10-03 Alias added: GHSA-3mp5-972c-2h7x

References

Advisory 3

Other 2

  • TI-2023-27641 In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size… CVSS 3.1HIGH 7.8
  • TI-2007-06062 Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting… CVSS 2.0HIGH 10.0
  • TI-2024-28655 Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to… CVSS 3.1HIGH 8.4
  • TI-2007-06063 exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences