CVEvulnerability

CVE-2005-1043

5.0 MEDIUM Published 2005-04-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-04-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

Affected configurations

• php php 4.3.0 • php php 4.3.1 • php php 4.3.2 • php php 4.3.3 • php php 4.3.4 • php php 4.3.5 • php php 4.3.6 • php php 4.3.7 • php php 4.3.8 • php php 4.3.9 • php php 4.3.10 • sgi propack 3.0 • conectiva linux 9.0 • conectiva linux 10.0 • apple mac os x 10.3.9 • apple mac os x 10.4 • apple mac os x 10.4.1 • apple mac os x server 10.3.9 • apple mac os x server 10.4 • apple mac os x server 10.4.1 • peachtree peachtree linux release 1 • suse suse linux 1.0 • suse suse linux 2.0 • suse suse linux 3.0 • suse suse linux 4.0 • suse suse linux 4.2 • suse suse linux 4.3 • suse suse linux 4.4 • suse suse linux 4.4.1 • suse suse linux 5.0 • suse suse linux 5.1 • suse suse linux 5.2 • suse suse linux 5.3 • suse suse linux 6.0 • suse suse linux 6.1 • suse suse linux 6.2 • suse suse linux 6.3 • suse suse linux 6.4 • suse suse linux 7.0 • suse suse linux 7.1 • suse suse linux 7.2 • suse suse linux 7.3 • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • suse suse linux 9.3

References