CVE:CVE-2004-1065
CNNVD:CNNVD-200501-060
PHP是一种流行的WEB服务器端编程语言。
PHP 4.3.10之前版本及5.x至5.0.2版本中exif_read_data函数存在缓冲区溢出漏洞。
远程攻击者可利用一个包含超长section name的图片文件，执行任意代码。
solution:Upgrade openpkg openpkg to a higher version than 2.1,2.2,current,and avoid the version 2.1,2.2,current; Upgrade php php to a higher version than 3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.0.12,3.0.13,3.0.14,3.0.15,3.0.16,3.0.17,3.0.18,4.0,4.0.1,4.0.1:patch1,4.0.1:patch2,4.0.2,4.0.3,4.0.3:patch1,4.0.4,4.0.5,4.0.6,4.0.7,4.0.7:rc1,4.0.7:rc2,4.0.7:rc3,4.1.0,4.1.1,4.1.2,4.2,4.2.0,4.2.1,4.2.2,4.2.3,4.3.0,4.3.1,4.3.2,4.3.3,4.3.4,4.3.5,4.3.6,4.3.7,4.3.8,4.3.9,5.0:rc1,5.0:rc2,5.0:rc3,5.0.0,5.0.1,5.0.2,and avoid the version 3.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6,3.0.7,3.0.8,3.0.9,3.0.10,3.0.11,3.0.12,3.0.13,3.0.14,3.0.15,3.0.16,3.0.17,3.0.18,4.0,4.0.1,4.0.1:patch1,4.0.1:patch2,4.0.2,4.0.3,4.0.3:patch1,4.0.4,4.0.5,4.0.6,4.0.7,4.0.7:rc1,4.0.7:rc2,4.0.7:rc3,4.1.0,4.1.1,4.1.2,4.2,4.2.0,4.2.1,4.2.2,4.2.3,4.3.0,4.3.1,4.3.2,4.3.3,4.3.4,4.3.5,4.3.6,4.3.7,4.3.8,4.3.9,5.0:rc1,5.0:rc2,5.0:rc3,5.0.0,5.0.1,5.0.2; Upgrade trustix secure_linux to a higher version than 2.0,2.1,2.2,and avoid the version 2.0,2.1,2.2; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1