CVE

Id
91363  
CVE No.
CVE-2016-4544  
Status
Candidate  
Description
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.  
Phase
Assigned (20160505)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
784796 91363 CVE-2016-4544 MLIST:[oss-security] 20160505 CVE Request: PHP: several issues fixed with 7.0.6, 5.6.21 and 5.5.35  View
784797 91363 CVE-2016-4544 URL:http://www.openwall.com/lists/oss-security/2016/05/05/21  View
784798 91363 CVE-2016-4544 CONFIRM:http://php.net/ChangeLog-5.php  View
784799 91363 CVE-2016-4544 CONFIRM:http://php.net/ChangeLog-7.php  View
784800 91363 CVE-2016-4544 CONFIRM:https://bugs.php.net/bug.php?id=72094  View
784801 91363 CVE-2016-4544 CONFIRM:https://git.php.net/?p=php-src.git;a=commit;h=082aecfc3a753ad03be82cf14f03ac065723ec92  View
784802 91363 CVE-2016-4544 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
784803 91363 CVE-2016-4544 DEBIAN:DSA-3602  View
784804 91363 CVE-2016-4544 URL:http://www.debian.org/security/2016/dsa-3602  View
784805 91363 CVE-2016-4544 FEDORA:FEDORA-2016-f4e73663f4  View
784806 91363 CVE-2016-4544 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html  View
784807 91363 CVE-2016-4544 SUSE:openSUSE-SU-2016:1524  View
784808 91363 CVE-2016-4544 URL:http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html  View
784809 91363 CVE-2016-4544 SUSE:openSUSE-SU-2016:1357  View
784810 91363 CVE-2016-4544 URL:http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html  View
784811 91363 CVE-2016-4544 BID:89844  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
156 JVNDB-2016-000163 Splunk Enterprise および Splunk Light におけるオープンリダイレクトの脆弱性 Splunk Enterprise および Splunk Light には、Splunk Web に関するオープンリダイレクトの脆弱性が存在します。 CVE-2016-4857 91363 2.6 4.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000163.html  View