Lucene search
Ubuntu.comUB:CVE-2015-0232HistoryJan 27, 2015 - 12:00 a.m.
CVE-2015-0232
2015-01-2700:00:00
ubuntu.com
ubuntu.com
11
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.88 High
EPSS
Percentile
98.6%
The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37,
5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to
execute arbitrary code or cause a denial of service (uninitialized pointer
free and application crash) via crafted EXIF data in a JPEG image.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | php5 in lucid and precise is built with mbstring, so xp_field->value does get properly set |
Related
cve
cve
CVE-2015-0232
2015-01-27 20:04:00
checkpoint_advisories
checkpoint_advisories
PHP exif Extension exif_read_data NULL Pointer Dereference (CVE-2015-0232)
2015-02-17 00:00:00
prion
prion
Null pointer dereference
2015-01-27 20:04:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0370-1)
2021-06-09 00:00:00
Fedora Update for php FEDORA-2015-1058
2015-02-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-474)
2015-09-08 00:00:00
nessus
nessus
SuSE 11.3 Security Update : php53 (SAT Patch Number 10313)
2015-02-25 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2015:032)
2015-02-06 00:00:00
Amazon Linux AMI : php54 (ALAS-2015-475)
2015-02-13 00:00:00
securityvulns
securityvulns
[ MDVSA-2015:032 ] php
2015-02-11 00:00:00
PHP multiple security vulnerabilities
2015-02-22 00:00:00
[USN-2501-1] PHP vulnerabilities
2015-02-22 00:00:00
archlinux
archlinux
php: remote code execution
2015-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.5-1.fc21
2015-02-06 03:59:46
[SECURITY] Fedora 20 Update: php-5.5.21-1.fc20
2015-02-06 04:03:31
amazon
amazon
Medium: php54
2015-02-11 19:34:00
Medium: php55
2015-02-11 19:33:00
debian
debian
[SECURITY] [DSA 3195-1] php5 security update
2015-03-18 11:56:46
[SECURITY] [DLA 212-1] php5 security update
2015-04-29 20:45:33
suse
suse
Security update for php5 (important)
2015-02-24 11:05:36
Security update for php53 (important)
2016-06-21 13:08:17
osv
osv
php5 - security update
2015-03-18 00:00:00
php5 - security update
2015-04-29 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2015-03-08 00:00:00
f5
f5
ubuntu
ubuntu
PHP vulnerabilities
2015-02-17 00:00:00
mageia
mageia
Updated php packages fix security vulnerabilities
2015-01-28 00:08:29
veracode
veracode
Remote Code Execution (RCE) Via Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
Memory Corruption
2019-05-02 05:39:23
oraclelinux
oraclelinux
php55 security and bug fix update
2016-02-04 00:00:00
php security update
2015-07-09 00:00:00
php54 security and bug fix update
2016-02-04 00:00:00
redhat
redhat
(RHSA-2015:1053) Moderate: php55 security and bug fix update
2015-06-04 00:00:00
(RHSA-2015:1218) Moderate: php security update
2015-07-09 00:00:00
(RHSA-2015:1066) Important: php54 security and bug fix update
2015-06-04 00:00:00
ibm
ibm
centos
centos
php security update
2015-07-09 19:23:41
php security update
2015-06-24 03:28:02
rosalinux
rosalinux
Advisory ROSA-SA-2021-1950
2021-07-02 17:57:45
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.88 High
EPSS
Percentile
98.6%
Related for UB:CVE-2015-0232