Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP组PHP远程JPEG文件格式化远程拒绝服务漏洞
Vulnerability Description
PHP 4.2.2、4.3.9、4.3.10和5.0.3版本的image.c的php_next_marker函数，该函数可由getimagesize PHP函数所调用，使得远程攻击者可以通过一个带有无效标记值的JPEG图像，造成php_stream_seek收到负数的长度值，从而发起拒绝服务攻击(无限循环)。
CVSS Information
N/A
Vulnerability Type
N/A