PT-2011-4994 · Php+3 · Php+3

Florent Hochwelker · Publicado 2011-11-29 · Atualizado 2024-06-15 · CVE-2011-4566

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.0beta2

Description The issue is related to an integer overflow in the exif process IFD TAG function in the exif extension. This allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset val value in an EXIF header in a JPEG file.

Recommendations For PHP version 5.4.0beta2, consider disabling the exif extension until a patch is available to prevent potential exploitation.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CESA-2012_0019

CVE-2011-4566

DSA-2399-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2012:0019

RHSA-2012:0033

RHSA-2012:0071

RHSA-2012_0019

RHSA-2012_0033

RHSA-2012_0071

Produtos afetados

Centos

Php

Red Hat

Suse

Referências · 161

• 🔥 https://bugs.php.net/bug.php?id=60150 · Exploit
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollision_dos.rb · Nota
• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2006-1494 · Nota
• https://suse.com/security/cve/CVE-2015-3415 · Nota
• https://suse.com/security/cve/CVE-2020-7063 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2011:197 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-2336 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota
• https://suse.com/security/cve/CVE-2011-3379 · Nota
• https://suse.com/security/cve/CVE-2013-1643 · Nota