Description

The exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.

Remediation

References

CVE-2015-0232

Related Vulnerabilities

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.36)

WordPress Plugin bbPress SQL Injection (2.5.14)

WordPress Plugin WP-PostRatings SQL Injection (1.83.1)

WordPress Plugin Twitter Button by BestWebSoft Cross-Site Request Forgery (2.14)

jQuery Validation Other Vulnerability (CVE-2022-31147)

Severity

Medium

Classification

CVE-2015-0232

Tags

Missing Update Known Vulnerabilities