Description

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.

Remediation

References

CVE-2011-0708

Related Vulnerabilities

WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)

WordPress Plugin Download Monitor 'dlsearch' Parameter Cross-Site Scripting (3.3.5.8)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41165)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-2986)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43770)

Severity

Medium

Classification

CVE-2011-0708 CWE-119

Tags

Missing Update Known Vulnerabilities