CVE-2004-1065: Buffer Overflow
Published Dec 22, 2004
·Updated
Buffer overflow in the exifreaddata function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
Affected Software
65 affected components
PHP PHP=4.3.9
PHP PHP=3.0
PHP PHP=3.0.5
PHP PHP=3.0.11
PHP PHP=4.2.0
PHP PHP=3.0.1
PHP PHP=3.0.2
PHP PHP=4.1.0
Openpkg Openpkg=2.1
PHP PHP=4.3.4
PHP PHP=4.0.4
PHP PHP=4.3.0
PHP PHP=4.0.5
PHP PHP=5.0-rc1
PHP PHP=3.0.8
PHP PHP=4.3.6
PHP PHP=3.0.13
PHP PHP=5.0.1
PHP PHP=4.0.7-rc2
PHP PHP=4.3.7
PHP PHP=4.0.7-rc1
PHP PHP=4.2.2
PHP PHP=3.0.7
PHP PHP=4.3.2
PHP PHP=3.0.6
PHP PHP=4.0.3-patch1
PHP PHP=3.0.17
PHP PHP=4.0.7
PHP PHP=4.0.2
PHP PHP=4.3.3
PHP PHP=5.0-rc3
PHP PHP=4.1.1
PHP PHP=3.0.15
PHP PHP=3.0.16
Openpkg Openpkg=current
PHP PHP=3.0.10
PHP PHP=3.0.4
PHP PHP=4.2.3
PHP PHP=4.0.1-patch1
PHP PHP=4.0
PHP PHP=4.0.1-patch2
PHP PHP=4.0.6
PHP PHP=5.0-rc2
PHP PHP=4.1.2
PHP PHP=4.0.7-rc3
Openpkg Openpkg=2.2
PHP PHP=4.3.1
PHP PHP=3.0.18
PHP PHP=4.2.1
PHP PHP=4.0.1
PHP PHP=5.0.2
PHP PHP=3.0.12
PHP PHP=4.2
PHP PHP=4.0.3
PHP PHP=3.0.14
PHP PHP=3.0.9
PHP PHP=3.0.3
PHP PHP=5.0.0
PHP PHP=4.3.8
PHP PHP=4.3.5
Trustix Secure Linux=2.0
Ubuntu Ubuntu Linux=4.1
Trustix Secure Linux=2.1
Trustix Secure Linux=2.2
Ubuntu Ubuntu Linux=4.1
Remediation
Patch Available
Event History
Dec 22, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1065?
CVE-2004-1065 is considered critical due to the potential for remote code execution.
2
How do I fix CVE-2004-1065?
To fix CVE-2004-1065, you should upgrade PHP to version 4.3.10 or later.
3
What systems are affected by CVE-2004-1065?
CVE-2004-1065 affects PHP versions prior to 4.3.10 and 5.0.2 as well as specific versions of OpenPKG and Trustix Secure Linux.
4
What exploitation method is utilized in CVE-2004-1065?
CVE-2004-1065 can be exploited through a buffer overflow in the exif_read_data function by using specially crafted image files.
5
Are there known workarounds for CVE-2004-1065?
A known workaround for CVE-2004-1065 is to disable the exif extension in PHP if upgrading is not feasible.