CVE

Id
11731  
CVE No.
CVE-2005-0525  
Status
Candidate  
Description
The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek.  
Phase
Assigned (20050223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
84004 11731 CVE-2005-0525 IDEFENSE:20050331 PHP getimagesize() Multiple Denial of Service Vulnerabilities  View
84005 11731 CVE-2005-0525 URL:http://www.securityfocus.com/archive/1/394797  View
84006 11731 CVE-2005-0525 APPLE:APPLE-SA-2005-06-08  View
84007 11731 CVE-2005-0525 URL:http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html  View
84008 11731 CVE-2005-0525 DEBIAN:DSA-729  View
84009 11731 CVE-2005-0525 URL:http://www.debian.org/security/2005/dsa-729  View
84010 11731 CVE-2005-0525 GENTOO:GLSA-200504-15  View
84011 11731 CVE-2005-0525 URL:http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml  View
84012 11731 CVE-2005-0525 MANDRAKE:MDKSA-2005:072  View
84013 11731 CVE-2005-0525 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:072  View
84014 11731 CVE-2005-0525 REDHAT:RHSA-2005:405  View
84015 11731 CVE-2005-0525 URL:http://www.redhat.com/support/errata/RHSA-2005-405.html  View
84016 11731 CVE-2005-0525 REDHAT:RHSA-2005:406  View
84017 11731 CVE-2005-0525 URL:http://www.redhat.com/support/errata/RHSA-2005-406.html  View
84018 11731 CVE-2005-0525 DEBIAN:DSA-708  View
84019 11731 CVE-2005-0525 URL:http://www.debian.org/security/2005/dsa-708  View
84020 11731 CVE-2005-0525 SUSE:SUSE-SA:2005:023  View
84021 11731 CVE-2005-0525 OVAL:oval:org.mitre.oval:def:11703  View
84022 11731 CVE-2005-0525 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11703  View
84023 11731 CVE-2005-0525 VUPEN:ADV-2005-0305  View
84024 11731 CVE-2005-0525 URL:http://www.vupen.com/english/advisories/2005/0305  View
84025 11731 CVE-2005-0525 OSVDB:15184  View
84026 11731 CVE-2005-0525 URL:http://www.osvdb.org/15184  View
84027 11731 CVE-2005-0525 SECTRACK:1013619  View
84028 11731 CVE-2005-0525 URL:http://securitytracker.com/id?1013619  View
84029 11731 CVE-2005-0525 SECUNIA:14792  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61938 JVNDB-2005-000140 Mozilla Firefox における privileged content をロードするプラグインにより任意のコードを実行される脆弱性 ------------ CVE-2005-0527 11731 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000140.html  View