Mandriva Linux Security Advisory – An integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57125/MDKSA-2007-118.txt
Source: https://packetstormsecurity.com/files/57125/Mandriva-Linux-Security-Advisory-2007.118.html