CVE-2004-1065
HIGH
10.0
CVSS 2.0
Description
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
Affected products and versions
- PHP versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 4.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 5.0.0, 5.0.1, 5.0.2, 5.0rc1, 5.0rc2, 5.0rc3
References
- msgs.securepoint.com http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
- www.novell.com http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html
- www.php.net http://www.php.net/release_4_3_10.php
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2004-687.html Patch, Vendor Advisory
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2005-032.html
- www.securityfocus.com http://www.securityfocus.com/advisories/9028
- bugzilla.fedora.us https://bugzilla.fedora.us/show_bug.cgi?id=2344
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/18517
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10877
- nvd.nist.gov Official NVD record