CVE-2011-4566

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.

References

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html

http://rhn.redhat.com/errata/RHSA-2012-0071.html

http://secunia.com/advisories/47253

http://secunia.com/advisories/48668

http://support.apple.com/kb/HT5281

http://www.debian.org/security/2012/dsa-2399

http://www.mandriva.com/security/advisories?name=MDVSA-2011:197

http://www.redhat.com/support/errata/RHSA-2012-0019.html

http://www.securityfocus.com/bid/50907

https://bugs.php.net/bug.php?id=60150

https://exchange.xforce.ibmcloud.com/vulnerabilities/71612

https://www.ubuntu.com/usn/USN-1307-1/

Details

Source: MITRE

Published: 2011-11-29

Updated: 2017-08-29

Type: CWE-189

Risk Information

CVSS v2

Base Score: 6.4

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Impact Score: 4.9

Exploitability Score: 10

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:php:php:5.4.0:beta2:32-bit:*:*:*:*:*

Tenable Plugins

View all (26 total)

IDNameProductFamilySeverity
78134F5 Networks BIG-IP : Multiple PHP vulnerabilities (K13519)NessusF5 Networks Local Security Checks
critical
74580openSUSE Security Update : php5 (openSUSE-SU-2012:0426-1)NessusSuSE Local Security Checks
high
69644Amazon Linux AMI : php (ALAS-2012-37)NessusAmazon Linux Local Security Checks
medium
68442Oracle Linux 4 : php (ELSA-2012-0071)NessusOracle Linux Local Security Checks
medium
68432Oracle Linux 5 : php (ELSA-2012-0033)NessusOracle Linux Local Security Checks
high
68431Oracle Linux 5 / 6 : php / php53 (ELSA-2012-0019)NessusOracle Linux Local Security Checks
medium
67087CentOS 4 : php (CESA-2012:0071)NessusCentOS Local Security Checks
medium
62236GLSA-201209-03 : PHP: Multiple vulnerabilitiesNessusGentoo Local Security Checks
critical
61227Scientific Linux Security Update : php on SL4.x i386/x86_64 (20120130)NessusScientific Linux Local Security Checks
medium
61220Scientific Linux Security Update : php on SL5.x i386/x86_64 (20120118)NessusScientific Linux Local Security Checks
high
61219Scientific Linux Security Update : php53 and php on SL5.x, SL6.x i386/x86_64 (20120111)NessusScientific Linux Local Security Checks
medium
6482Mac OS X 10.7 < 10.7.4 Multiple VulnerabilitiesNessus Network MonitorGeneric
critical
59066Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)NessusMacOS X Local Security Checks
critical
58740SuSE 11.1 Security Update : PHP5 (SAT Patch Number 5964)NessusSuSE Local Security Checks
high
57753Debian DSA-2399-2 : php5 - several vulnerabilitiesNessusDebian Local Security Checks
high
57748RHEL 4 : php (RHSA-2012:0071)NessusRed Hat Local Security Checks
medium
57642CentOS 5 : php (CESA-2012:0033)NessusCentOS Local Security Checks
high
57594RHEL 5 : php (RHSA-2012:0033)NessusRed Hat Local Security Checks
high
801116PHP < 5.3.9 Multiple VulnerabilitiesLog Correlation EngineWeb Servers
high
6263PHP < 5.3.9 Multiple VulnerabilitiesNessus Network MonitorWeb Servers
high
57537PHP < 5.3.9 Multiple VulnerabilitiesNessusCGI abuses
high
57494RHEL 5 / 6 : php53 and php (RHSA-2012:0019)NessusRed Hat Local Security Checks
medium
57489FreeBSD : php -- multiple vulnerabilities (d3921810-3c80-11e1-97e8-00215c6a37bb)NessusFreeBSD Local Security Checks
medium
57488CentOS 5 / 6 : php / php53 (CESA-2012:0019)NessusCentOS Local Security Checks
medium
57427Mandriva Linux Security Advisory : php (MDVSA-2011:197)NessusMandriva Local Security Checks
medium
57314Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : php5 vulnerability (USN-1307-1)NessusUbuntu Local Security Checks
medium