NVD

Id
31821  
Name
CVE-2014-3670  
Description
The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-29  
Modified Date
2016-10-17  
Seq
2014-3670  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167749 31821 CVE-2014-3670 http://git.php.net/?p=php-src.git;a=commit;h=ddb207e7fa2e9adeba021a1303c3781efda5409b  View
167750 31821 CVE-2014-3670 http://linux.oracle.com/errata/ELSA-2014-1767.html  View
167751 31821 CVE-2014-3670 http://linux.oracle.com/errata/ELSA-2014-1768.html  View
167752 31821 CVE-2014-3670 APPLE-SA-2015-04-08-2  View
167753 31821 CVE-2014-3670 openSUSE-SU-2014:1377  View
167754 31821 CVE-2014-3670 openSUSE-SU-2014:1391  View
167755 31821 CVE-2014-3670 openSUSE-SU-2015:0014  View
167756 31821 CVE-2014-3670 http://php.net/ChangeLog-5.php  View
167757 31821 CVE-2014-3670 RHSA-2014:1765  View
167758 31821 CVE-2014-3670 RHSA-2014:1766  View
167759 31821 CVE-2014-3670 RHSA-2014:1767  View
167760 31821 CVE-2014-3670 RHSA-2014:1768  View
167761 31821 CVE-2014-3670 RHSA-2014:1824  View
167762 31821 CVE-2014-3670 DSA-3064  View
167763 31821 CVE-2014-3670 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
167764 31821 CVE-2014-3670 70665  View
167765 31821 CVE-2014-3670 USN-2391-1  View
167766 31821 CVE-2014-3670 https://bugs.php.net/bug.php?id=68113  View
167767 31821 CVE-2014-3670 https://bugzilla.redhat.com/show_bug.cgi?id=1154502  View
167768 31821 CVE-2014-3670 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16241 JVNDB-2014-005116 PHP の EXIF エクステンションの exif.c 内の exif_ifd_make_value 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の EXIF エクステンションの exif.c 内の exif_ifd_make_value 関数は、浮動小数点の配列上で誤って動作するため、サービス運用妨害 (ヒープメモリ破損およびアプリケーションクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-3670 70958 CVE-2014-3670 31821 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005116.html 2014-10-16 2015-04-13 View