CVE

Id
52478  
CVE No.
CVE-2011-4566  
Status
Candidate  
Description
Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.  
Phase
Assigned (20111128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
558919 52478 CVE-2011-4566 CONFIRM:https://bugs.php.net/bug.php?id=60150  View
558920 52478 CVE-2011-4566 CONFIRM:http://support.apple.com/kb/HT5281  View
558921 52478 CVE-2011-4566 APPLE:APPLE-SA-2012-05-09-1  View
558922 52478 CVE-2011-4566 URL:http://lists.apple.com/archives/security-announce/2012/May/msg00001.html  View
558923 52478 CVE-2011-4566 DEBIAN:DSA-2399  View
558924 52478 CVE-2011-4566 URL:http://www.debian.org/security/2012/dsa-2399  View
558925 52478 CVE-2011-4566 MANDRIVA:MDVSA-2011:197  View
558926 52478 CVE-2011-4566 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:197  View
558927 52478 CVE-2011-4566 REDHAT:RHSA-2012:0019  View
558928 52478 CVE-2011-4566 URL:http://www.redhat.com/support/errata/RHSA-2012-0019.html  View
558929 52478 CVE-2011-4566 REDHAT:RHSA-2012:0071  View
558930 52478 CVE-2011-4566 URL:http://rhn.redhat.com/errata/RHSA-2012-0071.html  View
558931 52478 CVE-2011-4566 SUSE:openSUSE-SU-2012:0426  View
558932 52478 CVE-2011-4566 URL:http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html  View
558933 52478 CVE-2011-4566 UBUNTU:USN-1307-1  View
558934 52478 CVE-2011-4566 URL:https://www.ubuntu.com/usn/USN-1307-1/  View
558935 52478 CVE-2011-4566 BID:50907  View
558936 52478 CVE-2011-4566 URL:http://www.securityfocus.com/bid/50907  View
558937 52478 CVE-2011-4566 SECUNIA:48668  View
558938 52478 CVE-2011-4566 URL:http://secunia.com/advisories/48668  View
558939 52478 CVE-2011-4566 SECUNIA:47253  View
558940 52478 CVE-2011-4566 URL:http://secunia.com/advisories/47253  View
558941 52478 CVE-2011-4566 XF:php-exifprocessifdtag-dos(71612)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32878 JVNDB-2011-003118 Estate Agent コンポーネントにおける SQL インジェクションの脆弱性 Estate Agent (com_estateagent) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2011-4571 52478 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003118.html  View