PHP EXIF Header Denial of Service Vulnerability (Windows)

  1. Network Vulnerabilities
  2. Denial of Service
  3. PHP EXIF Header Denial of Service Vulnerability (Windows)
Summary
This host is installed with PHP and is prone to denial of service vulnerability.
Impact
Successful exploitation allows remote attackers to execute arbitrary code, obtain sensitive information or cause a denial of service. Impact Level: Application
Solution
Upgrade to PHP version 5.4.0 beta 4 or later. For updates refer to http://www.php.net/downloads.php
Insight
The flaw is due to an integer overflow error in 'exif_process_IFD_TAG' function in the 'ext/exif/exif.c' file, Allows remote attackers to cause denial of service via crafted offset_val value in an EXIF header.
Affected
PHP version 5.4.0 beta 2 on windows.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities