CVE-2004-1065
Fixed in a distro release EPSS 10%
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
Products: openpkg, php, trustix secure_linux, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-19.ent |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.2 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.2 |