CVE-2005-1043
Fixed in a distro release EPSS 2%
exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.
Products: php, sgi propack, conectiva linux, apple mac_os_x, apple mac_os_x_server, peachtree_linux, suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | php | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-debuginfo | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-devel | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-imap | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-ldap | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-mysql | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-odbc | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 3 | php-pgsql | 0:4.3.2-23.ent |
| Red Hat Enterprise Linux 4 | php | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-debuginfo | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-devel | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-domxml | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-gd | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-imap | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-ldap | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-mbstring | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-mysql | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-ncurses | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-odbc | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-pear | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-pgsql | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-snmp | 0:4.3.9-3.6 |
| Red Hat Enterprise Linux 4 | php-xmlrpc | 0:4.3.9-3.6 |