| Name | CVE-2005-0525 |
| Description | The php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a JPEG image with an invalid marker value, which causes a negative length value to be passed to php_stream_seek. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-708-1, DSA-729-1 |
| Debian Bugs | 302701 |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| php3 | source | woody | 3:3.0.18-23.1woody3 | DSA-708-1 | 302701 | |
| php3 | source | (unstable) | 3:3.0.18-31 | |||
| php4 | source | woody | 4:4.1.2-7.woody4 | DSA-729-1 | ||
| php4 | source | (unstable) | 4:4.3.10-10 |