Description
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | php +13 | 4.3.9-3.2 | RHSA-2005:032 |
| RHEL 3 | php +6 | 4.3.2-19.ent | RHSA-2004:687 |
Advisories 2
- RHSA-2005:032 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2004:687 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2005:032 vendor-advisory
- SUSE-SA:2005:002 vendor-advisory
- http://www.php.net/release_4_3_10.php
- oval:org.mitre.oval:def:10877 vdb-entry signature
- MDKSA-2004:151 vendor-advisory
- FLSA:2344 vendor-advisory
- php-exifreaddata-bo(18517) vdb-entry
- OpenPKG-SA-2004.053 vendor-advisory
- HPSBMA01212 vendor-advisory
- RHSA-2004:687 vendor-advisory