Tuesday, April 19, 2005
PHP Exif issues
A new release of PHP has been announced to deal with a variety of issues, including a security hole in the PHP Exif module. According to a Computerworld article, a malicious IFD could generate a buffer overflow resulting in the execution of arbitrary code. The article seems to imply that this is a cross-platform vulnerability.