CVE-2005-3353

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-18 · updated 2026-06-16

Description

The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.

Affected products

PHP: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 (+21)

References

http://bugs.php.net/bug.php?id=34704
http://docs.info.apple.com/article.html?artnum=303382
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
http://rhn.redhat.com/errata/RHSA-2005-831.html
http://secunia.com/advisories/17371
http://secunia.com/advisories/17490
http://secunia.com/advisories/17531
http://secunia.com/advisories/17557
http://secunia.com/advisories/18054
http://secunia.com/advisories/18198
http://secunia.com/advisories/19064

Get alerted when CVE-2005-3353 or the next vulnerability affects your stack