Vulnerability in PHP

CVE-2005-1042

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 4.3.0, 4.3.1, 4.3.2
  • N/a — versions n/a

References