File libexif5-CVE-2007-6352.patch of Package libexif5
--- libexif/exif-data.c +++ libexif/exif-data.c @@ -205,7 +205,7 @@ exif_data_load_data_thumbnail (ExifData *data, const unsigned char *d, unsigned int ds, ExifLong offset, ExifLong size) { - if (ds < offset + size) { + if ((ds < offset + size) || (offset > ds)) { #ifdef DEBUG printf ("Bogus thumbnail offset and size: %i < %i + %i.\n", (int) ds, (int) offset, (int) size);