CVE-2011-0708
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...
4.3 MediumPublic exploitFix available
CVE-2011-0708 is a medium vulnerability (CVSS 4.3) in Php, published March 20, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.83%, the 95th percentile. Fixed in php5 5.2.6.dfsg.1-1+lenny12.
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
Exploit likelihood
9.83%Down 2.7 points since Feb 4, 2022
What each source reports
NVD Score used
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
- Record
CVE-2011-0708- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
- Record
CVE-2011-0708- Updated
- 2026-11-02
EUVDEUVD-2011-0723 No score
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
- Record
EUVD-2011-0723- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cv97-45j6-8wc2 No score
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast,...
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
- Record
GHSA-cv97-45j6-8wc2- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:5.0 |
before 5.2.6.dfsg.1-1+lenny12, plus listed versions 5.2.6.dfsg.1-1+lenny105.2.6.dfsg.1-1+lenny115.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9 |
5.2.6.dfsg.1-1+lenny12 |
php5Debian:6.0 |
before 5.3.3-7+squeeze3, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze2 |
5.3.3-7+squeeze3 |
php53Red Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
Show 166 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php53-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-intlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-processRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53Red Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-cliRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-commonRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-dbaRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-develRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-gdRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-imapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-intlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-ldapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-odbcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pdoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-processRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pspellRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-snmpRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-soapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
phpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-cliRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-commonRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-gdRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-ldapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-mysqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-odbcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pdoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pgsqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-soapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-xmlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-xmlrpcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-bcmathRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-dbaRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-develRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-enchantRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-imapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-intlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-mbstringRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-processRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pspellRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-recodeRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-snmpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-tidyRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-ztsRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
phpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
phpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
phpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
phpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-develRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-domxmlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-gdRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-imapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ldapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mbstringRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-ncursesRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-odbcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pearRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-pgsqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-snmpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php-xmlrpcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.35 | 0:4.3.9-3.35 |
php7openSUSE:Tumbleweed |
before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed |
before 5.6.28-1.1 | 5.6.28-1.1 |
php8openSUSE:Tumbleweed |
before 8.0.11-1.1 | 8.0.11-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP 'Exif' Extension - 'exif_read_data()' Remote Denial of Service | 2011-02-28 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
marc.info?l=bugtraq&m=133469208622507&w=2
lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html
vupen.com/english/advisories/2011/0764
exploit-db.com/exploits/16261
bugzilla.redhat.com/show_bug.cgi?id=680972
Show 186 moreShow less
mandriva.com/security/advisories?name=MDVSA-2011:053
debian.org/security/2011/dsa-2266
php.net/releases/5_3_6.php
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
bugs.php.net/bug.php?id=54002
openwall.com/lists/oss-security/2011/02/16/7
redhat.com/support/errata/RHSA-2011-1423.html
securityreason.com/securityalert/8114
securityfocus.com/bid/46365
rhn.redhat.com/errata/RHSA-2012-0071.html
support.apple.com/kb/HT5002
svn.php.net/viewvc?view=revision&revision=308316
nvd.nist.gov/vuln/detail/CVE-2011-0708
github.com/advisories/GHSA-cv97-45j6-8wc2
access.redhat.com/errata/RHSA-2011:1423
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1423.json
cve.org/CVERecord?id=CVE-2011-0708
suse.com/security/cve/CVE-2006-7243