Description

The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image.

Remediation

References

CVE-2016-6292

Related Vulnerabilities

WordPress Plugin WP-Ban Cross-Site Scripting (1.69)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6024)

WordPress 7PK - Security Features Vulnerability (CVE-2014-9039)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.20)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.21)

Severity

Medium

Classification

CVE-2016-6292 CWE-476 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities