2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2005-1042" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2005-05-02T04:00:00.000" ,
2024-11-21 23:11:37 +00:00
"lastModified" : "2024-11-20T23:56:28.177" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P" ,
2024-11-21 23:11:37 +00:00
"baseScore" : 7.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-21 23:11:37 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : true ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "57B71BB7-5239-4860-9100-8CABC3992D8C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "11579E5C-D7CF-46EE-B015-5F4185C174E7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://usn.ubuntu.com/112-1/" ,
"source" : "secalert@redhat.com"
2024-11-21 23:11:37 +00:00
} ,
{
"url" : "http://cvs.php.net/diff.php/php-src/ext/exif/exif.c?r1=1.118.2.33&r2=1.118.2.34&ty=u" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://lists.apple.com/archives/security-announce/2005/Jun/msg00000.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.gentoo.org/security/en/glsa/glsa-200504-15.xml" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDKSA-2005:072" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-405.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.redhat.com/support/errata/RHSA-2005-406.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=154021" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10822" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://usn.ubuntu.com/112-1/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
