Description

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Remediation

References

CVE-2004-1065

Related Vulnerabilities

Plone CMS CVE-2011-0720 Vulnerability (CVE-2011-0720)

WordPress Plugin WP Statistics Cross-Site Scripting (12.0.5)

WordPress Plugin Indexisto WordPress Site Search Cross-Site Scripting (1.0.5)

WordPress Plugin GD bbPress Attachments Multiple Vulnerabilities (2.2)

Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1165)

Severity

Critical

Classification

CVE-2004-1065

Tags

Missing Update Known Vulnerabilities