Most recent entries from all

bdu:2022-02650

Withdrawn: BELL-CVE-2014-3670 — CVE-2014-3670 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2014-avi-483 — De multiples vulnérabilités ont été corrigées dans PHP. Elles permettent à un attaquant de…

certfr-2014-avi-483

EUVD-2026-99387

fkie_cve-2014-3670

The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted JPEG image with TIFF thumbnail data that is improperly handled by the exif_thumbnail function.

GHSA-r6jr-5phj-2qqh

gsd-2014-3670

openSUSE-SU-2024:10290-1 — apache2-mod_php7-7.0.14-1.4 on GA media

apache2-mod_php7-7.0.14-1.4 on GA media

RHSA-2014:1765 — Red Hat Security Advisory: php54-php security update

php: heap-based buffer over-read in DateInterval file: extensive backtracking in awk rule regular expression file: cdf_read_short_sector insufficient boundary check file: cdf_unpack_summary_info() excessive looping DoS file: CDF property info parsing nelements infinite loop file: unrestricted recursion in handling of indirect type rules file: out-of-bounds access in search rules with offsets from input file gd: NULL pointer dereference in gdImageCreateFromXpm() file: mconvert incorrect handling of truncated pascal string size file: cdf_check_stream_offset insufficient boundary check file: cdf_count_chain insufficient boundary check file: cdf_read_property_info insufficient boundary check php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw file: unrestricted regular expression matching file: incomplete fix for CVE-2012-1571 in cdf_read_property_info php: multiple buffer over-reads in php_parserr php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() php: integer overflow in unserialize() php: heap corruption issue in exif_thumbnail() file: out-of-bounds read in elf note headers php: heap-based buffer overflow in DNS TXT record parsing php: SPL Iterators use-after-free php: ArrayIterator use-after-free due to object change during sorting php: type confusion issue in phpinfo() leading to information leak php: gd extension NUL byte injection in file names

SUSE-SU-2015:0370-1 — Security update for php53

Security update for php53

UBUNTU-CVE-2014-3670

Affected: Ubuntu:14.04:LTS: php5