Description

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Remediation

References

CVE-2004-1065

Related Vulnerabilities

WordPress Plugin spam-byebye Cross-Site Scripting (2.2.1)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-17373)

PHP Numeric Errors Vulnerability (CVE-2008-2107)

WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-19910)

Severity

Critical

Classification

CVE-2004-1065

Tags

Missing Update Known Vulnerabilities