VDB
CVE-2005-0524
CVE-2005-0524
PUBLISHED
Reported by mitre · Published April 3, 2005
The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | * |
| php | php |
Timeline
- Apr 3, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Nov 3, 2023 EPSS Score
- Dec 26, 2023 EPSS Score
References
- 15183 vdb-entryx_refsource_OSVDB
- 1013619 vdb-entryx_refsource_SECTRACK
- RHSA-2005:406 vendor-advisoryx_refsource_REDHAT
- php-phphandleiff-dos(19920) vdb-entryx_refsource_XF
- MDKSA-2005:072 vendor-advisoryx_refsource_MANDRAKE
- GLSA-200504-15 vendor-advisoryx_refsource_GENTOO
- APPLE-SA-2005-06-08 vendor-advisoryx_refsource_APPLE
- oval:org.mitre.oval:def:9310 vdb-entrysignaturex_refsource_OVAL
- 14792 third-party-advisoryx_refsource_SECUNIA
- ADV-2005-0305 vdb-entryx_refsource_VUPEN
- 20050331 PHP getimagesize() Multiple Denial of Service Vulnerabilities third-party-advisoryx_refsource_IDEFENSE
- RHSA-2005:405 vendor-advisoryx_refsource_REDHAT