CVE-2016-4544
22.05.2016, 01:59
The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.Enginsight
| Vendor | Product | Version |
|---|---|---|
| php | php | 5.5.0 ≤ 𝑥 < 5.5.35 |
| php | php | 5.6.0 ≤ 𝑥 < 5.6.21 |
| php | php | 7.0.0 ≤ 𝑥 < 7.0.6 |
| opensuse | leap | 42.1 |
| opensuse | opensuse | 13.2 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References