Gentoo Linux Security Advisory GLSA 200712-17 – Meder Kydyraliev (Google Security) discovered that Exif metadata is not properly sanitized before being processed, resulting in illegal memory access in the postprop() and other functions (CVE-2007-6354). He also discovered integer overflow vulnerabilities in the parsetag() and other functions (CVE-2007-6355) and an infinite recursion in the readifds() function caused by recursive IFD references (CVE-2007-6356). Versions less than 1.01 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/62170/glsa-200712-17.txt
Source: https://packetstormsecurity.com/files/62170/Gentoo-Linux-Security-Advisory-200712-17.html