Description

The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.

Remediation

References

CVE-2005-3353

Related Vulnerabilities

Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11047)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.6.6)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-32071)

Apache Tomcat CVE-2023-44487 Vulnerability (CVE-2023-44487)

Severity

Medium

Classification

CVE-2005-3353

Tags

Missing Update Known Vulnerabilities