SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  PHP exif_process_unicode Function Remote Code Execution

Category: PL-VULNS      

The exif_process_unicode function in ext/exif/exif.c in PHP allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized pointer free and application crash) via crafted EXIF data in a JPEG image.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0232


Relevant Information