CVE-2011-0708

CVE-2011-0708 affects PHP’s exif extension: exif.c on 64-bit PHP builds before 5.3.6 performs an unsafe cast in the Exif IFD handling, enabling a crafted image to trigger a buffer over-read and cause an application crash (DoS). Multiple Nessus advisories reference this vector, often alongside oth...

CVE-2011-0708

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...

php -- crash on crafted tag in exif

US-CERT/NIST reports: exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...

CVE-2011-0708

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...

PHP 5.3 < 5.3.6 String To Double Conversion DoS

Binary data 801082.prm...

PHP 5.3.x < 5.3.6 Multiple Vulnerabilities

Binary data 5824.prm...

PHP Exif Extension 'exif_read_data()' Function Remote DoS

No description provided by source. ===================================================================== PHP Exif 64bit Casting Vulnerability ===================================================================== Affected Software : PHP = 5.3.5 Exif extension for 64bit platforms Severity : Low...

PHP Exif Extension - exif_read_data() Remote Denial of Service

PHP Exif Extension - exifreaddata Remote Denial of Service Source: http://permalink.gmane.org/gmane.comp.security.oss.general/4198 ===================================================================== PHP Exif 64bit Casting Vulnerability...

PHP 'Exif' Extension - 'exif_read_data()' Remote Denial of Service

Source: http://permalink.gmane.org/gmane.comp.security.oss.general/4198 ===================================================================== PHP Exif 64bit Casting Vulnerability ===================================================================== Affected Software : PHP = 5.3.5 Exif extension f...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 6536)

Multiple issues have been fixed in php5 : - phpopensslapplyverificationpolicy fails to verify certificate. CVE-2009-3291 - 'missing sainity checks around exif'. CVE-2009-3292 - unspecified vulnerability in the imagecolortransparent. CVE-2009-3293 - denial of service in exif module CVE-2009-2687...

Mandriva Linux Security Advisory : php (MDVSA-2009:302)

Some vulnerabilities were discovered and corrected in php-5.3.1 : - Added maxfileuploads INI directive, which can be set to limit the number of file uploads per-request to 20 by default, to prevent possible DOS via temporary file exhaustion. Ilia - Added missing sanity checks around exif...

Mandriva Linux Security Advisory : php (MDVSA-2009:248)

Multiple vulnerabilities was discovered and corrected in php : The phpopensslapplyverificationpolicy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates CVE-2009-3291...

CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

DEBIAN-CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

Stack overflow

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

CVE-2010-2067

CVE-2010-2067 describes a stack-based buffer overflow in LibTIFF via a long EXIF SubjectDistance field in TIFF images, affecting LibTIFF up to version 3.9.4. The vulnerability allows remote attackers to trigger application crashes or possibly execute arbitrary code. Affected component: LibTIFF (t...

CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...

CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tifdirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file...