NVD

Id
10955  
Name
CVE-2011-4566  
Description
Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-11-28  
Modified Date
2016-12-07  
Seq
2011-4566  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61142 10955 CVE-2011-4566 APPLE-SA-2012-05-09-1  View
61143 10955 CVE-2011-4566 openSUSE-SU-2012:0426  View
61144 10955 CVE-2011-4566 RHSA-2012:0071  View
61145 10955 CVE-2011-4566 http://support.apple.com/kb/HT5281  View
61146 10955 CVE-2011-4566 DSA-2399  View
61147 10955 CVE-2011-4566 MDVSA-2011:197  View
61148 10955 CVE-2011-4566 RHSA-2012:0019  View
61149 10955 CVE-2011-4566 50907  View
61150 10955 CVE-2011-4566 php-exifprocessifdtag-dos(71612)  View
61151 10955 CVE-2011-4566 https://bugs.php.net/bug.php?id=60150  View
61152 10955 CVE-2011-4566 USN-1307-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32872 JVNDB-2011-003112 PHP の exif.c にある exif_process_IFD_TAG 関数における整数オーバーフローの脆弱性 PHP の exif 拡張内にある exif.c の exif_process_IFD_TAG 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2011-4566 52473 CVE-2011-4566 10955 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003112.html 2011-10-27 2012-05-14 View