CVE-2009-2687

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image…

published August 5, 2009

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04378 · 91.2th percentile
Published
2009-08-05T19:00Z
EPSS history
Timeline
  • 05 AUG 19:00Z
    The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image…
    cvelistv5