Description

Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."

Remediation

References

CVE-2009-3292

Related Vulnerabilities

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-0996)

WordPress Plugin MapSVG Lite Arbitrary File Upload (4.0.5)

WordPress Plugin Subscribe Sidebar by Blubrry Cross-Site Scripting (1.3.1)

WordPress Plugin Product Reviews Import Export for WooCommerce CSV Injection (1.4.8)

WordPress Plugin Count per Day 'notes.php' Cross-Site Scripting (3.2.3)

Severity

High

Classification

CVE-2009-3292

Tags

Missing Update Known Vulnerabilities