CVE-2005-3353: Medium severity PHP PHP vulnerability
Published Nov 18, 2005
·Updated
The exifreaddata function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.
Affected Software
27 affected components
PHP PHP=4.3.9
PHP PHP=4.2.0
PHP PHP=4.1.0
PHP PHP=4.3.4
PHP PHP=4.0.4
PHP PHP=4.3.0
PHP PHP=4.0.5
PHP PHP=4.3.6
PHP PHP=4.3.7
PHP PHP=4.2.2
PHP PHP=4.3.2
PHP PHP=4.3.11
PHP PHP=4.0.0
PHP PHP=4.0.2
PHP PHP=4.3.3
PHP PHP=4.1.1
PHP PHP=4.2.3
PHP PHP=4.0.6
PHP PHP=4.1.2
PHP PHP=4.3.1
PHP PHP=4.4.0
PHP PHP=4.3.10
PHP PHP=4.2.1
PHP PHP=4.0.1
PHP PHP=4.0.3
PHP PHP=4.3.8
PHP PHP=4.3.5
Remediation
Patch Available
Event History
Nov 18, 2005
CVE Published
11:03 PM
Nov 19, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3353?
CVE-2005-3353 is categorized as a denial of service vulnerability due to an infinite loop caused by a malformed JPEG image.
2
How do I fix CVE-2005-3353?
To resolve CVE-2005-3353, upgrade PHP to version 4.4.1 or later.
3
Which PHP versions are affected by CVE-2005-3353?
CVE-2005-3353 affects PHP versions 4.0.0 to 4.4.0.
4
What impact does CVE-2005-3353 have on my application?
CVE-2005-3353 allows remote attackers to exploit the vulnerability, resulting in a denial of service and potential disruption of application functionality.
5
Is CVE-2005-3353 a known issue in the PHP exif module?
Yes, CVE-2005-3353 is a known issue within the exif_read_data function of the PHP Exif module.