Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Loginwindow | — | Upgrade macOS to the latest versionApply OS X security update 2012-002 | Aug 28, 2015 | Nov 28, 2011 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Jul 16, 2012 | Nov 28, 2011 |
| Centos_linux | — | Upgrade php53-xmlUpgrade php-tidyUpgrade php-mbstringUpgrade php-dbaUpgrade php-processUpgrade php-intlUpgrade php53-pspellUpgrade php-gdUpgrade php-mysqlUpgrade php53-develUpgrade php-xmlrpcUpgrade php-pspellUpgrade php53-pgsqlUpgrade php-enchantUpgrade php53-mysqlUpgrade php53-soapUpgrade php-soapUpgrade php53Upgrade php-recodeUpgrade php53-xmlrpcUpgrade php53-cliUpgrade php53-intlUpgrade php53-snmpUpgrade php53-mbstringUpgrade php-pearUpgrade php-imapUpgrade php-snmpUpgrade php53-pdoUpgrade php53-bcmathUpgrade php-bcmathUpgrade php53-commonUpgrade php-ncursesUpgrade php53-ldapUpgrade php-ztsUpgrade php53-gdUpgrade php-pgsqlUpgrade php53-dbaUpgrade php-odbcUpgrade php-pdoUpgrade php-domxmlUpgrade php53-processUpgrade php-xmlUpgrade php-develUpgrade php53-odbcUpgrade php-commonUpgrade php53-imapUpgrade php-cliUpgrade php-embeddedUpgrade phpUpgrade php-ldap | Dec 1, 2016 | Nov 28, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 20, 2013 |
| Freebsd | — | Upgrade php52-exifUpgrade php52Upgrade php5-exifUpgrade php5 | Dec 10, 2025 | Jan 11, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Nov 28, 2011 |
| Oracle_linux | — | Upgrade php53-gdUpgrade php53-pdoUpgrade php-ztsUpgrade php-odbcUpgrade php-imapUpgrade php53-dbaUpgrade php-pgsqlUpgrade php53-odbcUpgrade php53-pgsqlUpgrade php53-bcmathUpgrade php53-processUpgrade php-intlUpgrade phpUpgrade php53-cliUpgrade php-commonUpgrade php-pdoUpgrade php-ldapUpgrade php-tidyUpgrade php53-ldapUpgrade php53-snmpUpgrade php53-imapUpgrade php-ncursesUpgrade php-bcmathUpgrade php53-pspellUpgrade php53Upgrade php53-mysqlUpgrade php53-intlUpgrade php53-commonUpgrade php-gdUpgrade php-cliUpgrade php-embeddedUpgrade php-enchantUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-dbaUpgrade php-mysqlUpgrade php-recodeUpgrade php-pspellUpgrade php-soapUpgrade php53-xmlrpcUpgrade php53-xmlUpgrade php-snmpUpgrade php-processUpgrade php53-develUpgrade php53-mbstringUpgrade php-develUpgrade php53-soapUpgrade php-xml | Oct 16, 2024 | Nov 29, 2011 |
| Php | — | Upgrade to PHP version 5.4.1 | Feb 2, 2012 | Nov 28, 2011 |
| Suse | — | Upgrade php53-bz2Upgrade php8-pcntlUpgrade php53-curlUpgrade php53-socketsUpgrade php53-bcmathUpgrade php53-zlibUpgrade php8-cliUpgrade php8-mbstringUpgrade php7-develUpgrade php72-develUpgrade php8-curlUpgrade php8-calendarUpgrade php53-gdUpgrade php8-zlibUpgrade apache2-mod_php8Upgrade php8-mysqlUpgrade php53-pdoUpgrade php8-opcacheUpgrade php53-sysvshmUpgrade php53Upgrade php7-jsonUpgrade php53-fileinfoUpgrade php8-soapUpgrade php53-sqliteUpgrade php8-xmlreaderUpgrade php53-readlineUpgrade php53-ctypeUpgrade php7-domUpgrade php8-gettextUpgrade php8-tidyUpgrade php8-develUpgrade php53-pcntlUpgrade php53-xslUpgrade php8-bz2Upgrade php53-intlUpgrade php8-ctypeUpgrade php53-calendarUpgrade php8-fpm-apacheUpgrade php53-opensslUpgrade php8-readlineUpgrade php53-jsonUpgrade php53-tokenizerUpgrade php8-tokenizerUpgrade php53-sysvsemUpgrade php53-xmlwriterUpgrade php8-sysvmsgUpgrade php8Upgrade php8-sysvsemUpgrade php8-dbaUpgrade php8-gdUpgrade php8-pgsqlUpgrade apache2-mod_php53Upgrade php53-xmlrpcUpgrade php8-xmlwriterUpgrade php8-zipUpgrade php8-enchantUpgrade php7-xmlreaderUpgrade php53-snmpUpgrade php8-intlUpgrade php8-odbcUpgrade php8-posixUpgrade php53-mcryptUpgrade php53-sysvmsgUpgrade php8-ftpUpgrade php5-develUpgrade php8-fastcgiUpgrade php7-tokenizerUpgrade php8-exifUpgrade php53-imapUpgrade php7-mysqlUpgrade php8-ffiUpgrade php8-snmpUpgrade php8-fileinfoUpgrade apache2-mod_php7Upgrade php53-pspellUpgrade php53-dbaUpgrade php53-mbstringUpgrade php7-xmlwriterUpgrade php53-iconvUpgrade php7-sqliteUpgrade php7Upgrade php8-shmopUpgrade php53-domUpgrade php53-xmlreaderUpgrade php8-sqliteUpgrade php53-posixUpgrade php53-shmopUpgrade php8-pharUpgrade php8-ldapUpgrade php53-exifUpgrade php53-odbcUpgrade php53-zipUpgrade php53-gettextUpgrade php8-socketsUpgrade php8-sodiumUpgrade php7-pgsqlUpgrade php53-fastcgiUpgrade php8-embedUpgrade php8-fpmUpgrade php53-ftpUpgrade php53-mysqlUpgrade php53-pgsqlUpgrade php8-domUpgrade php53-soapUpgrade php7-iconvUpgrade php53-tidyUpgrade php53-suhosinUpgrade php8-sysvshmUpgrade php53-ldapUpgrade php8-iconvUpgrade php8-gmpUpgrade php53-wddxUpgrade php8-pdoUpgrade php8-bcmathUpgrade php7-ctypeUpgrade php7-pdoUpgrade php53-develUpgrade php53-pearUpgrade php8-opensslUpgrade php53-gmpUpgrade php8-xsl | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade php5-cliUpgrade php5-cgi | Nov 8, 2024 | Nov 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub