EUVD-2016-5529

Malware in sbrugna...

PHP exif_process_unicode Heap Buffer Overflow DoS

The vulnerability of the exifprocessunicode function ext/exif/exif.c in the PHP interpreter is related to the use of an uninitialized pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

PT-2022-37085

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 15, and the crash state...

PT-2022-36926

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 11, and the crash state...

PT-2021-28220

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type and state, with specific function names such as exif...

PT-2021-28218

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, with specific function names such as exif...

PT-2021-28150

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type and state, which involve functions such as estrdup,...

PT-2020-21968

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 9 crash occurred, involving the exif process IFD in MAKERNOTE, exif process IFD TAG, and exif process IFD in TIFF functions...

php: Heap buffer overflow in function exif_process_IFD_TAG()

When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.28, 7.2.x below 7.2.17 and 7.3.x below 7.3.4 can be caused to read past allocated buffer in exifprocessIFDTAG function. This may lead to information disclosure or crash...

php:php-fuzz-exif: Use-of-uninitialized-value in exif_process_TIFF_in_JPEG

Detailed Report: https://oss-fuzz.com/testcase?key=5631203063627776 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-exif Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: exifprocessTIFFinJPEG exifscanJPEGheader...

Information Disclosure

php is vulnerable to information disclosure. An uninitialized read in the function exifprocessIFDinMAKERNOTE allows an attacker to potentially read confidential information off uninitialized memory...

Denial Of Service (DoS)

PHP is vulnerable to denial-of-service DoS. The attack can be triggered when an attacker passes a malicious JPEG file to the function exifprocessIFDinMAKERNOTE in ext/exif/exif.c...

PT-2019-5009

Name of the Vulnerable Software and Affected Versions PHP EXIF extension versions 7.1.x through 7.1.28 PHP EXIF extension versions 7.2.x through 7.2.17 PHP EXIF extension versions 7.3.x through 7.3.4 Description The issue is related to the PHP EXIF extension, where processing certain files can...

PT-2019-5433

Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.1.27 PHP versions 7.2.x prior to 7.2.16 PHP versions 7.3.x prior to 7.3.3 Description An issue was discovered in the EXIF component, specifically an Invalid Read in the exif process SOFn function. This issue is related ...

PT-2018-2650

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.37 PHP versions 7.0.x prior to 7.0.31 PHP versions 7.1.x prior to 7.1.20 PHP versions 7.2.x prior to 7.2.8 Description The issue is related to the exif process IFD in MAKERNOTE function in the ext/exif/exif.c file,...

PT-2019-4834

Name of the Vulnerable Software and Affected Versions PHP EXIF extension versions 7.1.x through 7.1.27 PHP EXIF extension versions 7.2.x through 7.2.16 PHP EXIF extension versions 7.3.x through 7.3.3 Description The issue is related to the PHP EXIF extension's handling of certain files, which can...

PT-2016-3392

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.38 PHP versions 5.6.x prior to 5.6.24 PHP versions 7.x prior to 7.0.9 Description The issue is related to the exif process user comment function, which allows remote attackers to cause a denial of service, resulting i...

PT-2016-2080

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.35 PHP versions 5.6.x prior to 5.6.21 PHP versions 7.x prior to 7.0.6 Description The issue is caused by a buffer overflow in the exif process TIFF in JPEG function. This can be exploited by a remote attacker using...

PT-2016-2082

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.35 PHP versions 5.6.x prior to 5.6.21 PHP versions 7.x prior to 7.0.6 Description The issue arises from the improper construction of spprintf arguments in the exif process IFD TAG function, allowing remote attackers t...

PHP 5.4.x < 5.4.37 Multiple Vulnerabilities

According to its banner, the version of PHP 5.4.x installed on the remote host is prior to 5.4.37. It is, therefore, affected by multiple vulnerabilities: - The CGI component has an out-of-bounds read flaw in file 'cgimain.c' when nmap is used to process an invalid file that begins with a hash...