← Back

CVE-2005-1043

nvd nist
Published: Apr 14, 2005Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.

Affected (71)

Products: Conectiva: Linux · Php: Php · Sgi: Propack · +3 more
Show all products
1 product
Linux
1 product
Php
1 product
Propack
2 products
Mac Os X
Mac Os X Server
1 product
Peachtree Linux
1 product
Suse Linux
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Conectiva
Version 10.0
Version 9.0
Php
Version 4.3.0
Version 4.3.10
Version 4.3.1
Version 4.3.2
Version 4.3.3
Version 4.3.4
Version 4.3.5
Version 4.3.6
Version 4.3.7
Version 4.3.8
Version 4.3.9
Version 3.0
Configuration B
57 vulnerable
Vulnerable SoftwareAffected Versions
Apple
Version 10.3.9
Version 10.4.1
Version 10.4
Apple
Version 10.3.9
Version 10.4.1
Version 10.4
Version release_1
Suse
Version 1.0
Version 2.0
Version 3.0
Version 4.0
Version 4.2
Version 4.3
Version 4.4.1
Version 4.4
Version 5.0
Version 5.1
Version 5.2
Version 5.3
Version 6.0
Version 6.1
Version 6.1 alpha
Version 6.2
Version 6.3
Version 6.3
Version 6.3 alpha
Version 6.4
Version 6.4
Version 6.4
Version 6.4 alpha
Version 7.0
Version 7.0
Version 7.0
Version 7.0
Version 7.0 alpha
Version 7.1
Version 7.1
Version 7.1
Version 7.1
Version 7.1 alpha
Version 7.2
Version 7.2
Version 7.3
Version 7.3
Version 7.3
Version 7.3
Version 8.0
Version 8.0
Version 8.1
Version 8.2
Version 9.0
Version 9.0
Version 9.1
Version 9.1
Version 9.2
Version 9.2
Version 9.3

References (16)

Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.