Description

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.

Remediation

References

CVE-2011-0708

Related Vulnerabilities

Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15811)

WordPress Plugin SendinBlue Subscribe Form And WP SMTP Multiple Unspecified Vulnerabilities (2.7.3)

WordPress Plugin Front End Upload Arbitrary File Upload (0.5.4.4)

WordPress Plugin WP htaccess Control Unspecified Vulnerability (2.4)

Oracle Database Server CVE-2013-5764 Vulnerability (CVE-2013-5764)

Severity

Medium

Classification

CVE-2011-0708 CWE-119

Tags

Missing Update Known Vulnerabilities