CVE-2009-2687

 

Published at: - 05-08-2009 09:30

Last modified: - 19-01-2023 05:38

Total changes: - 2

Description

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:N/I:N/A:P

 

Verification logic

 

Reference

• http://www.php.net/releases/5_2_10.php
• 35441-Broken Link, Vendor Advisory
• 55222-Broken Link
• 35440-Patch, Third Party Advisory, VDB Entry
• ADV-2009-1632-Patch, Vendor Advisory
• http://bugs.php.net/bug.php?id=48378
• MDVSA-2009:167-Broken Link
• MDVSA-2009:145-Broken Link
• 36462-Broken Link
• SUSE-SR:2009:017-Mailing List, Third Party Advisory
• 37482-Broken Link
• DSA-1940-Third Party Advisory
• 40262-Broken Link
• HPSBUX02543-Mailing List, Third Party Advisory
• php-exifreaddata-dos(51253)-Third Party Advisory, VDB Entry
• oval:org.mitre.oval:def:6655-Third Party Advisory
• oval:org.mitre.oval:def:10695-Third Party Advisory
• USN-824-1-Broken Link

 

Keywords

NVD

 

CVE-2009-2687

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures