CVE-2005-1042

PHP - Remote Code Execution via Integer Overflow in exif_process_IFD_TAG

Title source: manual
STIX 2.1

Description

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

References (9)

Core 9
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-406.html
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:072
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822
Patch vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/112-1/
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-405.html

Scores

EPSS 0.0610
EPSS Percentile 90.9%

Details

Status published
Products (11)
php/php 4.3.0
php/php 4.3.1
php/php 4.3.2
php/php 4.3.3
php/php 4.3.4
php/php 4.3.5
php/php 4.3.6
php/php 4.3.7
php/php 4.3.8
php/php 4.3.9
... and 1 more
Published May 02, 2005
Tracked Since Feb 18, 2026