Description
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
References (23)
Core 23
Core References
Mailing List vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Vendor Advisory x_refsource_confirm
http://www.php.net/ChangeLog-5.php#5.2.11
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3184
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/20/3
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37482
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/40262
Various Sources mailing-list
x_refsource_mlist
http://news.php.net/php.announce/79
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=127680701405735&w=2
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Release Notes x_refsource_confirm
http://www.php.net/releases/5_2_11.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1022914
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/58186
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/36791
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2009/dsa-1940
Vendor Advisory x_refsource_confirm
http://www.php.net/ChangeLog-5.php
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/20/2
Release Notes x_refsource_confirm
http://www.php.net/releases/5_3_1.php
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37412
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:302
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT3937
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652
Scores
EPSS
0.0361
EPSS Percentile
87.9%
Details
Status
published
Products (35)
php/php
1.0
php/php
2.0
php/php
2.0b10
php/php
3.0
php/php
3.0.1
php/php
3.0.2
php/php
3.0.3
php/php
3.0.4
php/php
3.0.5
php/php
3.0.6
... and 25 more
Published
Sep 22, 2009
Tracked Since
Feb 18, 2026