Integer overflow

Integer overflow in the exifprocessIFDTAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offsetval value in an EXIF header in a JPEG file, a...

CVE-2011-4566

CVE-2011-4566 is an integer overflow in the exif extension (exif_process_IFD_TAG) of PHP, triggered on 32‑bit platforms by a crafted EXIF header in a JPEG. This allows remote attackers to read arbitrary memory or cause a denial of service. The CVE is acknowledged in multiple advisories (Debian, C...