CVE-2005-1043 exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recurs...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 4.3.0 | No fix listed |
| PHP | = 4.3.1 | No fix listed |
| PHP | = 4.3.2 | No fix listed |
| PHP | = 4.3.3 | No fix listed |
| PHP | = 4.3.4 | No fix listed |
| PHP | = 4.3.5 | No fix listed |
| PHP | = 4.3.6 | No fix listed |
| PHP | = 4.3.7 | No fix listed |
| PHP | = 4.3.8 | No fix listed |
| PHP | = 4.3.9 | No fix listed |
| PHP | = 4.3.10 | No fix listed |
| sgi propack | = 3.0 | No fix listed |
| conectiva linux | = 9.0 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| apple mac os x | = 10.3.9 | No fix listed |
| apple mac os x | = 10.4 | No fix listed |
| apple mac os x | = 10.4.1 | No fix listed |
| apple mac os x server | = 10.3.9 | No fix listed |
| apple mac os x server | = 10.4 | No fix listed |
| apple mac os x server | = 10.4.1 | No fix listed |
| peachtree linux | = release_1 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 2.0 | No fix listed |
| suse linux | = 3.0 | No fix listed |
| suse linux | = 4.0 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 4.2 | No fix listed |
| suse linux | = 4.3 | No fix listed |
| suse linux | = 4.4 | No fix listed |
| suse linux | = 4.4.1 | No fix listed |
| suse linux | = 5.0 | No fix listed |
| suse linux | = 5.1 | No fix listed |
| suse linux | = 5.2 | No fix listed |
| suse linux | = 5.3 | No fix listed |
| suse linux | = 6.0 | No fix listed |
| suse linux | = 6.1 | No fix listed |
| suse linux | = 6.1-alpha | No fix listed |
| suse linux | = 6.2 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.3-alpha | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| suse linux | = 9.3 | No fix listed |
References
- cvs.php.net vendor-advisory
- APPLE-SA-2005-06-08 vendor-advisory
- GLSA-200504-15 patch vendor-advisory
- MDKSA-2005:072 vendor-advisory
- RHSA-2005:406 patch vendor-advisory
- bugzilla.redhat.com vendor-advisory
- oval:org.mitre.oval:def:10307 signature vdb-entry
- USN-112-1 vendor-advisory