HTTP: PHP Exif Header Parsing Integer Overflow

This signature detects attempts to exploit a known integer overflow vulnerability against PHP. A successful attack can result in information disclosure or a denial-of-service condition.

Extended Description

PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values are not overrun. Successful exploits of this vulnerability allow remote attackers to execute arbitrary code in the context of a webserver affected by the issue. Failed attempts will likely result in denial-of-service conditions. PHP 5.4.0beta2 is vulnerable; other versions may also be affected.

Affected Products

Avaya aura_sip_enablement_services

References

BugTraq: 50907

CVE: CVE-2011-4566

URL: https://bugs.php.net/bug.php?id=60150

Short Name

HTTP:PHP:EXIF-HEADER

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: PHP Exif Header Parsing Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?