CVE-2011-4566: Integer Overflow
Integer overflow in the exifprocessIFDTAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offsetval value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4566?
CVE-2011-4566 has a severity rating that indicates it can lead to the reading of arbitrary memory locations or denial of service.
How do I fix CVE-2011-4566?
To fix CVE-2011-4566, upgrade to a version of PHP that is not vulnerable, such as PHP 5.4 or higher.
Which versions of PHP are affected by CVE-2011-4566?
CVE-2011-4566 affects PHP version 5.4.0beta2 and any 5.3 versions up to 5.3.9.
What types of attacks can CVE-2011-4566 enable?
CVE-2011-4566 can enable remote attackers to exploit vulnerabilities in image processing to read sensitive data or crash the application.
On which platforms does CVE-2011-4566 pose a risk?
CVE-2011-4566 primarily poses a risk on 32-bit platforms due to the nature of the integer overflow vulnerability.