CVE-2005-1042

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that…

published April 12, 2005

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04016 · 90.5th percentile
Published
2005-04-12T04:00Z
EPSS history
Timeline
  • 12 APR 04:00Z
    Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that…
    cvelistv5