NVD

Id
66791  
Name
CVE-2005-1042  
Description
Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2010-08-21  
Seq
2005-1042  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
346975 66791 CVE-2005-1042 http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u  View
346976 66791 CVE-2005-1042 APPLE-SA-2005-06-08  View
346977 66791 CVE-2005-1042 oval:org.mitre.oval:def:10822  View
346978 66791 CVE-2005-1042 GLSA-200504-15  View
346979 66791 CVE-2005-1042 MDKSA-2005:072  View
346980 66791 CVE-2005-1042 RHSA-2005:405  View
346981 66791 CVE-2005-1042 RHSA-2005:406  View
346982 66791 CVE-2005-1042 USN-112-1  View
346983 66791 CVE-2005-1042 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62053 JVNDB-2005-000255 PHP の exif_process_IFD_TAG 関数における整数オーバーフローの脆弱性 ------------ CVE-2005-1042 12246 CVE-2005-1042 66791 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000255.html 2005-04-12 2007-04-01 View