CVE Vulnerabilities

CVE-2005-3353

Published: Nov 18, 2005 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.

Affected Software

Name Vendor Start Version End Version
Php Php 4.0.0 (including) 4.0.0 (including)
Php Php 4.0.1 (including) 4.0.1 (including)
Php Php 4.0.2 (including) 4.0.2 (including)
Php Php 4.0.3 (including) 4.0.3 (including)
Php Php 4.0.4 (including) 4.0.4 (including)
Php Php 4.0.5 (including) 4.0.5 (including)
Php Php 4.0.6 (including) 4.0.6 (including)
Php Php 4.1.0 (including) 4.1.0 (including)
Php Php 4.1.1 (including) 4.1.1 (including)
Php Php 4.1.2 (including) 4.1.2 (including)
Php Php 4.2.0 (including) 4.2.0 (including)
Php Php 4.2.1 (including) 4.2.1 (including)
Php Php 4.2.2 (including) 4.2.2 (including)
Php Php 4.2.3 (including) 4.2.3 (including)
Php Php 4.3.0 (including) 4.3.0 (including)
Php Php 4.3.1 (including) 4.3.1 (including)
Php Php 4.3.2 (including) 4.3.2 (including)
Php Php 4.3.3 (including) 4.3.3 (including)
Php Php 4.3.4 (including) 4.3.4 (including)
Php Php 4.3.5 (including) 4.3.5 (including)
Php Php 4.3.6 (including) 4.3.6 (including)
Php Php 4.3.7 (including) 4.3.7 (including)
Php Php 4.3.8 (including) 4.3.8 (including)
Php Php 4.3.9 (including) 4.3.9 (including)
Php Php 4.3.10 (including) 4.3.10 (including)
Php Php 4.3.11 (including) 4.3.11 (including)
Php Php 4.4.0 (including) 4.4.0 (including)
Red Hat Enterprise Linux 3 RedHat php-0:4.3.2-26.ent *
Red Hat Enterprise Linux 4 RedHat php-0:4.3.9-3.9 *
Php4 Ubuntu dapper *
Php4 Ubuntu edgy *
Php5 Ubuntu dapper *
Php5 Ubuntu devel *
Php5 Ubuntu edgy *
Php5 Ubuntu feisty *

References