PT-2016-3370 · Php+2 · Php+2
Nguyenvuhoang199321
·
Publicado
2016-09-11
·
Atualizado
2018-01-05
·
CVE-2016-7128
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 5.6.25
PHP versions 7.x prior to 7.0.10
Description
The issue is related to the
exif process IFD in TIFF function in the ext/exif/exif.c file, which mishandles the case of a thumbnail offset that exceeds the file size. This allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image. The vulnerability is associated with the disclosure of protected information and can be exploited by a remote attacker to reveal protected information.Recommendations
For PHP versions prior to 5.6.25, update to version 5.6.25 or later.
For PHP versions 7.x prior to 7.0.10, update to version 7.0.10 or later.
Exploit
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Php
Suse
Ubuntu