An out-of-bounds read in exif_process_IFD_in_MAKERNOTE() in PHP - #VU209
Published: July 25, 2016 / Updated: August 13, 2016
Vulnerability identifier: #VU209
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-401
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose potentially sensitive information.
The vulnerability exists due to an out-of-bounds read error in exif_process_IFD_in_MAKERNOTE() function. A remote unauthenticated attacker can gain access to potentially sensitive data.
Successful exploitation of this vulnerability may lead to information leak or memory corruption.
The vulnerability exists due to an out-of-bounds read error in exif_process_IFD_in_MAKERNOTE() function. A remote unauthenticated attacker can gain access to potentially sensitive data.
Successful exploitation of this vulnerability may lead to information leak or memory corruption.
Affected software
PHP
Remediation
Install the latest versions: (5.5.38, 5.6.24, 7.0.9).