CVE-2009-3292

Publication date 22 September 2009

Last updated 24 July 2024


Ubuntu priority

Description

Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."

Read the notes from the security team

Status

Package Ubuntu Release Status
php5 9.10 karmic
Fixed in 5.2.10.dfsg.1-2ubuntu6.3
9.04 jaunty
Fixed in 5.2.6.dfsg.1-3ubuntu4.4
8.10 intrepid
Fixed in 5.2.6-2ubuntu4.5
8.04 LTS hardy
Fixed in 5.2.4-2ubuntu5.9
6.06 LTS dapper
Fixed in 5.1.2-1ubuntu3.17

Notes


mdeslaur

denial of service

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
php5

References

Related Ubuntu Security Notices (USN)

    • USN-862-1
    • PHP vulnerabilities
    • 26 November 2009

Other references


Access our resources on patching vulnerabilities