PT-2011-4994 · Php+3 · Php+3

Florent Hochwelker · Published 2011-11-29 · Updated 2024-06-15 · CVE-2011-4566

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.0beta2

Description The issue is related to an integer overflow in the exif process IFD TAG function in the exif extension. This allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset val value in an EXIF header in a JPEG file.

Recommendations For PHP version 5.4.0beta2, consider disabling the exif extension until a patch is available to prevent potential exploitation.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CESA-2012_0019

CVE-2011-4566

DSA-2399-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2012:0019

RHSA-2012:0033

RHSA-2012:0071

RHSA-2012_0019

RHSA-2012_0033

RHSA-2012_0071

Affected Products

Centos

Php

Red Hat

Suse

References · 161

• 🔥 https://bugs.php.net/bug.php?id=60150 · Exploit
• http://mandriva.com/security/advisories?name=MDVSA-2011:197 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02608 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-0071.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-0019.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10290-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10344-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02619 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-4566 · Security Note
• https://bdu.fstec.ru/vul/2022-02615 · Security Note
• http://debian.org/security/2012/dsa-2399 · Vendor Advisory
• https://ubuntu.com/usn/USN-1307-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4566 · Security Note