CVE-2005-1042: Integer Overflow
Published Apr 12, 2005
·Updated
Integer overflow in the exifprocessIFDTAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.
Affected Software
11 affected components
PHP PHP=4.3.9
PHP PHP=4.3.4
PHP PHP=4.3.0
PHP PHP=4.3.6
PHP PHP=4.3.7
PHP PHP=4.3.2
PHP PHP=4.3.3
PHP PHP=4.3.1
PHP PHP=4.3.10
PHP PHP=4.3.8
PHP PHP=4.3.5
Remediation
Patch Available
Event History
Apr 12, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1042?
CVE-2005-1042 is categorized as a high-severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2005-1042?
To fix CVE-2005-1042, upgrade your PHP installation to version 4.3.11 or later.
3
Which versions of PHP are affected by CVE-2005-1042?
CVE-2005-1042 affects multiple versions of PHP prior to 4.3.11, including 4.3.0 through 4.3.10.
4
What type of attack is possible with CVE-2005-1042?
An attacker can exploit CVE-2005-1042 to execute arbitrary code remotely by crafting a malicious IFD tag.
5
Is CVE-2005-1042 related to file uploads in PHP?
Yes, CVE-2005-1042 can be exploited during image uploads that include EXIF metadata.