Description

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

Remediation

References

CVE-2009-2687

Related Vulnerabilities

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2606)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12830)

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)

WordPress Plugin BackWPup Multiple Local File Include Vulnerabilities (1.5.2)

WordPress Plugin ClickBank Affiliate Ads Multiple Vulnerabilities (1.7)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2009-2687