CVE-2011-4566: canonical ubuntu_linux Numeric Errors
Vulnerability summary
CVE-2011-4566 is a medium (CVSS 6.4) Numeric Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 6.56% chance of exploitation in the next 30 days, higher than 93.8% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.4, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 3Timeline
- 29-11-2011PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
6.56%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
No change 0.00 pp
From 6.56% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (bugs.php.net)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Canonical1 product
- ubuntu_linuxEOL8.04 | 10.04 | 10.10 | 11.04 | 11.10
Debian1 product
- debian_linuxEOL5.0 | 6.0 | 7.0
Php1 product
- phpEOL≥ 5.3.0, < 5.3.9 | 5.4.0:beta2
3 vendors · 3 products
References
13 links
- www.mandriva.com/security/advisories?name=MDVSA-2011:197Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.redhat.com/support/errata/RHSA-2012-0019.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
Show all 13 references
- lists.apple.com/archives/security-announce/2012/May/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory