ubuntu · CVE-2004-1065

Quick triage

Priority: medium Published: 2005-01-10 05:00:00 UTC Updated: 2025-07-17 16:34:20 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2004-1065 medium priority: Ubuntu including 2 source packages (php4, php5), 8 status rows across 4 suites (dapper, edgy, feisty, upstream): released 5, needs-triage 2, DNE 1.

Description:

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

cvelogic Threat Intelligence