CVE-2009-3292: High severity php vulnerability
Published Sep 22, 2009
·Updated
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
Affected Software
109 affected components
PHP PHP=4.3.9
PHP PHP=4.4.9
PHP PHP=3.0
PHP PHP=5.2.9
PHP PHP=4.0-beta1
PHP PHP=3.0.5
PHP PHP=3.0.11
PHP PHP=5.1.5
PHP PHP=5.1.2
PHP PHP=4.0-beta4
PHP PHP=4.2.0
PHP PHP=5.1.1
PHP PHP=3.0.1
PHP PHP=3.0.2
PHP PHP=4.4.4
PHP PHP=5.0.0-beta1
PHP PHP=4.1.0
PHP PHP=5.1.6
PHP PHP=4.3.4
PHP PHP=4.0.4
PHP PHP=4.3.0
PHP PHP=4.0.5
PHP PHP=5.0-rc1
PHP PHP=5.2.7
PHP PHP=5.2.2
PHP PHP=3.0.8
PHP PHP=5.0.5
PHP PHP=4.3.6
PHP PHP=3.0.13
PHP PHP=5.0.1
PHP PHP=4.0.7-rc4
PHP PHP=5.1.4
PHP PHP=4.0.7-rc2
PHP PHP=4.3.7
PHP PHP=5.0.4
PHP PHP=4.0.7-rc1
PHP PHP=4.2.2
PHP PHP<=5.2.10
PHP PHP=4.4.2
PHP PHP=4.0-rc1
PHP PHP=3.0.7
PHP PHP=4.3.2
PHP PHP=4.3.11
PHP PHP=4.0.0
PHP PHP=3.0.6
PHP PHP=4.0.3-patch1
PHP PHP=3.0.17
PHP PHP=4.0.7
PHP PHP=4
PHP PHP=4.0.2
PHP PHP=4.3.3
PHP PHP=5.0-rc3
PHP PHP=2.0
PHP PHP=4.1.1
PHP PHP=3.0.15
PHP PHP=3.0.16
PHP PHP=5.2.6
PHP PHP=4.4.3
PHP PHP=5.0.0-rc2
PHP PHP=5.0.3
PHP PHP=3.0.10
PHP PHP=3.0.4
PHP PHP=4.2.3
PHP PHP=5.1.0
PHP PHP=4.4.5
PHP PHP=4.0.1-patch1
PHP PHP=5.0.0-rc3
PHP PHP=4.0
PHP PHP=4.0-beta2
PHP PHP=4.0.1-patch2
PHP PHP=2.0b10
PHP PHP=4.4.8
PHP PHP=4.0.6
PHP PHP=5.2.0
PHP PHP=5.0-rc2
PHP PHP=5.2.4
PHP PHP=4.1.2
PHP PHP=5.0.0-beta3
PHP PHP=4.0.7-rc3
PHP PHP=4.0-rc2
PHP PHP=4.3.1
PHP PHP=5.1.3
PHP PHP=3.0.18
PHP PHP=4.0-beta_4_patch1
PHP PHP=4.4.0
PHP PHP=4.3.10
PHP PHP=4.2.1
PHP PHP=5.0.0-rc1
PHP PHP=4.0.4-patch1
PHP PHP=4.0.1
PHP PHP=1.0
PHP PHP=5.0.2
PHP PHP=4.4.6
PHP PHP=3.0.12
PHP PHP=4.2
PHP PHP=4.4.1
PHP PHP=4.0-beta3
PHP PHP=4.0.3
PHP PHP=3.0.14
PHP PHP=3.0.9
PHP PHP=3.0.3
PHP PHP=5.0.0-beta4
PHP PHP=5
PHP PHP=5.0.0
PHP PHP=4.3.8
PHP PHP=4.3.5
PHP PHP=5.0.0-beta2
PHP PHP=5.2.8
PHP PHP=4.4.7
Event History
Sep 22, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3292?
The severity of CVE-2009-3292 is classified as unspecified due to the lack of detailed information about its impact and attack vectors.
2
How do I fix CVE-2009-3292?
To fix CVE-2009-3292, upgrade PHP to version 5.2.11 or later, or 5.3.1 or later, as these versions include the necessary patches.
3
What versions of PHP are affected by CVE-2009-3292?
CVE-2009-3292 affects PHP versions before 5.2.11 and all 5.3.x versions prior to 5.3.1.
4
What kind of vulnerability is CVE-2009-3292?
CVE-2009-3292 is an unspecified vulnerability related to missing sanity checks around EXIF processing in PHP.
5
Can CVE-2009-3292 be exploited remotely?
The details regarding remote exploitability of CVE-2009-3292 are unclear due to unspecified attack vectors.