NetSight
IP …
medium5.0

CVE-2005-1043

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting lev…

Impact

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

Affected products

VendorProductAffected versions
PhpPhp
Versions 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5
SgiPropack
Version 3.0
ConectivaLinux
Versions 9.0, 10.0
AppleMac Os X
Versions 10.3.9, 10.4, 10.4.1
AppleMac Os X Server
Versions 10.3.9, 10.4, 10.4.1
PeachtreePeachtree Linux
Version release_1
SuseSuse Linux
Versions 1.0, 2.0, 3.0, 4.0, 4.2, 4.3

References