NetSight
IP …
high7.5

CVE-2005-1042

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that l…

Impact

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

Affected products

VendorProductAffected versions
PhpPhp
Versions 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5

References