oval:org.mitre.oval:def:6655

Definition Id: oval:org.mitre.oval:def:6655

Oval ID:	oval:org.mitre.oval:def:6655
Title:	HP-UX Running Apache with PHP, Remote Denial of Service (DoS), Unauthorized Access, Privileged Access, Cross Site Scripting (XSS)
Description:	The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-2687	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02543 platforms HP-UX B.11.31 AND HP Release B.11.23 AND filesets tests hpuxws22APCH32.PHP version is less than B.2.2.8.10 AND hpuxws22APCH32.PHP2 version is less than B.2.2.8.10 AND hpuxws22APACHE.PHP version is less than B.2.2.8.10 AND hpuxws22APACHE.PHP2 version is less than B.2.2.8.10 OR Criteria meets HP Security Bulletin HPSBUX02543 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests hpuxwsAPCH32.PHP version is less than B.2.0.59.16 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.59.16 AND hpuxwsAPACHE.PHP version is less than B.2.0.59.16 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.59.16