CVE-2009-2687
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...
4.3 Medium
CVE-2009-2687 is a medium vulnerability (CVSS 4.3) in Php, published August 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.38%, the 91st percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 4.38%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
Exploit likelihood
4.38%Up 0.4 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:4.0 From an advisory covering 5 CVEs | before 5.2.0+dfsg-8+etch16, plus listed versions 5.2.0+dfsg-8+etch155.2.0-105.2.0-10+lenny15.2.0-115.2.0-8+etch1 Show 13 moreShow less5.2.0-8+etch105.2.0-8+etch115.2.0-8+etch11~p15.2.0-8+etch135.2.0-8+etch35.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch95.2.0-8+etch9~bpo31+15.2.0-9 | 5.2.0+dfsg-8+etch16 |
php5Debian:5.0 From an advisory covering 5 CVEs | before 5.2.6.dfsg.1-1+lenny4, plus listed versions 5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny3 | 5.2.6.dfsg.1-1+lenny4 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
Show 177 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
What each source reports
NVD Score used
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
- Record
CVE-2009-2687- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
- Record
CVE-2009-2687- Updated
- 2026-11-02
EUVDEUVD-2009-2680No score
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
- Record
EUVD-2009-2680- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gjvv-qp9c-jcr8No score
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to...
The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
- Record
GHSA-gjvv-qp9c-jcr8- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
usn.ubuntu.com/824-1
secunia.com/advisories/37482
bugs.php.net/bug.php?id=48378
marc.info?l=bugtraq&m=127680701405735&w=2
mandriva.com/security/advisories?name=MDVSA-2009:145
Show 71 moreShow less
vupen.com/english/advisories/2009/1632
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6655
debian.org/security/2009/dsa-1940
osvdb.org/55222
securityfocus.com/bid/35440
exchange.xforce.ibmcloud.com/vulnerabilities/51253
lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
php.net/releases/5_2_10.php
nvd.nist.gov/vuln/detail/CVE-2009-2687
github.com/advisories/GHSA-gjvv-qp9c-jcr8
access.redhat.com/errata/RHSA-2009:1461
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=466518
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1461.json
cve.org/CVERecord?id=CVE-2008-4456