Improper input validation in PHP - CVE-2015-0232
Published: November 27, 2018
Vulnerability identifier: #VU16104
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-0232
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.
The weakness exists due to an error in the exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5. A remote attacker can trigger uninitialized pointer free via crafted EXIF data in a JPEG image and cause the service to crash or execute arbitrary code.
The weakness exists due to an error in the exif_process_unicode function in ext/exif/exif.c in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5. A remote attacker can trigger uninitialized pointer free via crafted EXIF data in a JPEG image and cause the service to crash or execute arbitrary code.
Affected software
PHP
Gentoo Linux
Amazon Linux AMI
Fedora
php5 (Ubuntu package)
php
Gentoo Linux
Amazon Linux AMI
Fedora
php5 (Ubuntu package)
php
How to mitigate CVE-2015-0232
Install updates from vendor's website.
PHP - addressed in versions 5.4.37, 5.5.21, 5.6.5
php5 (Ubuntu package) - addressed in versions 5.3.10-1ubuntu3.16, 5.5.9+dfsg-1ubuntu4.6, 5.5.12+dfsg-2ubuntu4.2
php - update to 5.6.5-1.fc21
php5 (Ubuntu package) - addressed in versions 5.3.10-1ubuntu3.16, 5.5.9+dfsg-1ubuntu4.6, 5.5.12+dfsg-2ubuntu4.2
php - update to 5.6.5-1.fc21