Launchpad.net

CVE 2007-6356

exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.

See the CVE page on Mitre.org for more details.