#VU210 NULL pointer dereference in exif_process_user_comment() in PHP - CVE-2016-6292

Vulnerability identifier: #VU210

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2016-6292

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
PHP

Software vendor:
PHP Group

The vulnerability allows a remote attacker to cause denial of service conditions.

The vulnerability exists due to a NULL pointer dereference error in the "exif_process_user_comment()" function. A remote unauthenticated attacker can cause a denial of servoice when trying to encode JIS string.

Successful exploitation of this vulnerability may result in a crash of a worker process.

Install the latest versions: (5.5.38, 5.6.24, 7.0.9).

• http://bugs.php.net/72618
• http://php.net/ChangeLog-5.php#5.5.38
• http://php.net/ChangeLog-5.php#5.6.24
• http://php.net/ChangeLog-7.php#7.0.9