PT-2016-3370 · Php+2 · Php+2
Nguyenvuhoang199321
·
Published
2016-09-11
·
Updated
2018-01-05
·
CVE-2016-7128
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 5.6.25
PHP versions 7.x prior to 7.0.10
Description
The issue is related to the
exif process IFD in TIFF function in the ext/exif/exif.c file, which mishandles the case of a thumbnail offset that exceeds the file size. This allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image. The vulnerability is associated with the disclosure of protected information and can be exploited by a remote attacker to reveal protected information.Recommendations
For PHP versions prior to 5.6.25, update to version 5.6.25 or later.
For PHP versions 7.x prior to 7.0.10, update to version 7.0.10 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Php
Suse
Ubuntu