Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:PHP:EXIF-INVALID-TAG |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
PHP Exif Invalid Tag Data Buffer Overflow Attempt |
Release Date |
2016/08/26 |
Update Number |
2773 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: PHP Exif Invalid Tag Data Buffer Overflow Attempt
This signature detects attempts to exploit a known vulnerability in the Exif module of PHP. Successful exploitation would cause the PHP interpreter to crash, leading to a denial of service condition.
Extended Description
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
Affected Products
- Php php 1.0
- Php php 2.0
- Php php 2.0b10
- Php php 3.0
- Php php 3.0.1
- Php php 3.0.10
- Php php 3.0.11
- Php php 3.0.12
- Php php 3.0.13
- Php php 3.0.14
- Php php 3.0.15
- Php php 3.0.16
- Php php 3.0.17
- Php php 3.0.18
- Php php 3.0.2
- Php php 3.0.3
- Php php 3.0.4
- Php php 3.0.5
- Php php 3.0.6
- Php php 3.0.7
- Php php 3.0.8
- Php php 3.0.9
- Php php 4.0
- Php php 4.0.0
- Php php 4.0.1
- Php php 4.0.2
- Php php 4.0.3
- Php php 4.0.4
- Php php 4.0.5
- Php php 4.0.6
- Php php 4.0.7
- Php php 4.1.0
- Php php 4.1.1
- Php php 4.1.2
- Php php 4.2.0
- Php php 4.2.1
- Php php 4.2.2
- Php php 4.2.3
- Php php 4.3.0
- Php php 4.3.1
- Php php 4.3.10
- Php php 4.3.11
- Php php 4.3.2
- Php php 4.3.3
- Php php 4.3.4
- Php php 4.3.5
- Php php 4.3.6
- Php php 4.3.7
- Php php 4.3.8
- Php php 4.3.9
- Php php 4.4.0
- Php php 4.4.1
- Php php 4.4.2
- Php php 4.4.3
- Php php 4.4.4
- Php php 4.4.5
- Php php 4.4.6
- Php php 4.4.7
- Php php 4.4.8
- Php php 4.4.9
- Php php 5.0.0
- Php php 5.0.1
- Php php 5.0.2
- Php php 5.0.3
- Php php 5.0.4
- Php php 5.0.5
- Php php 5.1.0
- Php php 5.1.1
- Php php 5.1.2
- Php php 5.1.3
- Php php 5.1.4
- Php php 5.1.5
- Php php 5.1.6
- Php php 5.2.0
- Php php 5.2.1
- Php php 5.2.10
- Php php 5.2.11
- Php php 5.2.12
- Php php 5.2.13
- Php php 5.2.14
- Php php 5.2.15
- Php php 5.2.16
- Php php 5.2.17
- Php php 5.2.2
- Php php 5.2.3
- Php php 5.2.4
- Php php 5.2.5
- Php php 5.2.6
- Php php 5.2.7
- Php php 5.2.8
- Php php 5.2.9
- Php php 5.3.0
- Php php 5.3.1
- Php php 5.3.2
- Php php 5.3.3
- Php php 5.3.4
- Php php 5.3.5
References
- CVE: CVE-2011-0708