Description

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

Remediation

References

CVE-2005-1042

Related Vulnerabilities

WordPress Plugin BuddyPress Edit Activity Cross-Site Scripting (1.0.5)

PHP Cryptographic Issues Vulnerability (CVE-2010-1128)

Joomla! Core 3.x.x Security Bypass (3.8.0 - 3.9.3)

MySQL CVE-2022-21595 Vulnerability (CVE-2022-21595)

MySQL CVE-2014-6555 Vulnerability (CVE-2014-6555)

Severity

High

Classification

CVE-2005-1042

Tags

Missing Update Known Vulnerabilities