exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | Mar 19, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Mar 19, 2011 |
| Centos_linux | — | Upgrade php-imapUpgrade php-commonUpgrade php53-pgsqlUpgrade php-mbstringUpgrade php53-ldapUpgrade php-ncursesUpgrade php-cliUpgrade php53-xmlrpcUpgrade php-snmpUpgrade php-mysqlUpgrade php53-develUpgrade php-dbaUpgrade php53-cliUpgrade php53-dbaUpgrade php53-mysqlUpgrade php53-processUpgrade php-xmlrpcUpgrade php53-intlUpgrade php53-bcmathUpgrade php-pdoUpgrade php53-gdUpgrade php-ldapUpgrade php-bcmathUpgrade php53-commonUpgrade php53-soapUpgrade phpUpgrade php-pearUpgrade php53Upgrade php53-snmpUpgrade php53-imapUpgrade php-gdUpgrade php-develUpgrade php-odbcUpgrade php-pgsqlUpgrade php53-mbstringUpgrade php-domxmlUpgrade php-soapUpgrade php-xmlUpgrade php53-odbcUpgrade php53-pspellUpgrade php53-xmlUpgrade php53-pdo | Dec 1, 2016 | Mar 19, 2011 |
| F5 Big Ip | — | — | Feb 16, 2017 | Mar 19, 2011 |
| Freebsd | — | Upgrade php5-exif | Dec 10, 2025 | Mar 25, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 19, 2011 |
| Oracle_linux | — | Upgrade php53-soapUpgrade php53-bcmathUpgrade php-pdoUpgrade php53-mbstringUpgrade php53-odbcUpgrade php-mysqlUpgrade php-ztsUpgrade php-pgsqlUpgrade php-mbstringUpgrade php53-commonUpgrade php-develUpgrade php-gdUpgrade php-soapUpgrade php-bcmathUpgrade php53-pspellUpgrade php53-pgsqlUpgrade php-pspellUpgrade php-odbcUpgrade php53-ldapUpgrade php-processUpgrade php-commonUpgrade php53-develUpgrade php53-mysqlUpgrade php53-imapUpgrade php-xmlrpcUpgrade php53-xmlUpgrade php-xmlUpgrade php53-intlUpgrade php53Upgrade php53-cliUpgrade php53-gdUpgrade php-enchantUpgrade phpUpgrade php-tidyUpgrade php-recodeUpgrade php53-pdoUpgrade php53-dbaUpgrade php-imapUpgrade php-ldapUpgrade php-intlUpgrade php-ncursesUpgrade php53-xmlrpcUpgrade php53-processUpgrade php53-snmpUpgrade php-cliUpgrade php-snmpUpgrade php-dbaUpgrade php-embedded | Oct 16, 2024 | Mar 20, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Jul 17, 2012 | Mar 20, 2011 |
| Suse | — | Upgrade php53-soapUpgrade php8-xslUpgrade php8-sodiumUpgrade php53-wddxUpgrade php8-ffiUpgrade php53-ftpUpgrade php53-dbaUpgrade php8-snmpUpgrade php8-fastcgiUpgrade apache2-mod_php7Upgrade php7-ctypeUpgrade php8-opcacheUpgrade php5-calendarUpgrade php8-posixUpgrade php53-intlUpgrade apache2-mod_php5Upgrade php72-develUpgrade php53-pgsqlUpgrade php5-bcmathUpgrade php53-mcryptUpgrade php53-jsonUpgrade php7-iconvUpgrade php8-sysvshmUpgrade php8-shmopUpgrade php53-develUpgrade php5-zlibUpgrade php5-suhosinUpgrade php53-sqliteUpgrade php7-xmlwriterUpgrade php53-bz2Upgrade php8-bz2Upgrade php5-curlUpgrade php5-sysvshmUpgrade php8-calendarUpgrade php8-intlUpgrade php8-embedUpgrade php5-dbaUpgrade php7-pgsqlUpgrade php8-opensslUpgrade php8-mbstringUpgrade php53-domUpgrade php5-develUpgrade php53-pearUpgrade php8-pharUpgrade php53-mysqlUpgrade php8-bcmathUpgrade php8-exifUpgrade php5-tokenizerUpgrade php53-ldapUpgrade php8-gdUpgrade php8-sqliteUpgrade php5-ldapUpgrade php53-bcmathUpgrade php8-socketsUpgrade php5-wddxUpgrade php53-opensslUpgrade php53-xmlrpcUpgrade php8-xmlreaderUpgrade php53-fastcgiUpgrade php5-xmlrpcUpgrade php8-soapUpgrade php7-tokenizerUpgrade php5-pgsqlUpgrade php5-gdUpgrade php53-gmpUpgrade php8-enchantUpgrade php5-zipUpgrade php5-pspellUpgrade php53-xslUpgrade php5-dbaseUpgrade php53-tokenizerUpgrade php5-pcntlUpgrade php5Upgrade php53-sysvmsgUpgrade php5-ctypeUpgrade php53-calendarUpgrade php53-pspellUpgrade php8-gettextUpgrade php53-suhosinUpgrade php8-iconvUpgrade php5-mysqlUpgrade php5-domUpgrade php7-xmlreaderUpgrade php8-mysqlUpgrade php7-develUpgrade php8-develUpgrade php7-mysqlUpgrade php5-mbstringUpgrade php53Upgrade php8-fileinfoUpgrade php8-zipUpgrade php8-ftpUpgrade php8-curlUpgrade php53-sysvsemUpgrade php53-pcntlUpgrade php53-iconvUpgrade php5-snmpUpgrade php8-gmpUpgrade php5-pdoUpgrade php8-zlibUpgrade php53-ctypeUpgrade php53-xmlreaderUpgrade php53-fileinfoUpgrade php5-soapUpgrade php53-pdoUpgrade php5-iconvUpgrade php5-hashUpgrade php53-gettextUpgrade php53-snmpUpgrade php5-mcryptUpgrade php53-socketsUpgrade php5-sysvmsgUpgrade php8-pgsqlUpgrade php8Upgrade php53-posixUpgrade php53-imapUpgrade php8-odbcUpgrade php53-sysvshmUpgrade php8-pcntlUpgrade php53-exifUpgrade php53-xmlwriterUpgrade php5-gmpUpgrade php8-domUpgrade php8-tidyUpgrade php7-jsonUpgrade php5-jsonUpgrade apache2-mod_php8Upgrade php5-exifUpgrade php5-opensslUpgrade php7-sqliteUpgrade php5-ftpUpgrade php53-gdUpgrade php7-pdoUpgrade php5-fastcgiUpgrade php5-xmlreaderUpgrade php8-xmlwriterUpgrade php5-bz2Upgrade php53-shmopUpgrade php5-xslUpgrade php5-sysvsemUpgrade php53-tidyUpgrade php5-xmlwriterUpgrade php53-mbstringUpgrade php53-readlineUpgrade php8-fpm-apacheUpgrade php8-sysvsemUpgrade php8-tokenizerUpgrade php53-zlibUpgrade php8-pdoUpgrade php5-shmopUpgrade php5-gettextUpgrade php8-dbaUpgrade php8-ldapUpgrade php7Upgrade php5-odbcUpgrade php8-fpmUpgrade php8-cliUpgrade php5-pearUpgrade php7-domUpgrade php8-ctypeUpgrade php53-zipUpgrade php8-readlineUpgrade apache2-mod_php53Upgrade php8-sysvmsgUpgrade php53-odbcUpgrade php53-curl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-intlUpgrade php5-gdUpgrade php5-cgiUpgrade php5Upgrade php5-curlUpgrade php5-commonUpgrade php5-devUpgrade php-pearUpgrade libapache2-mod-php5Upgrade php5-cli | Nov 8, 2024 | Mar 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub