Intrusion PreventionPHP.Exif.Process.User.Comment.DoS
Description
This indicates an attack attempt to exploit a Denial of Service vulnerability in PHP.
The vulnerability is due to a null pointer dereference in exif_process_user_comment when the vulnerable software tries to handle JIS encoded user comment Exif tags while multi-byte string support is enabled in PHP. A remote attacker may be able exploit this to perform a denial of service condition on the system via a crafted image.
Affected Products
PHP Group PHP prior to 5.5.38
PHP Group PHP prior to 5.6.24
PHP Group PHP prior to 7.0.9
Impact
Denial of Service: Remote attackers can crash vulnerable systems
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://php.net/ChangeLog-7.php#7.0.9
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42829 |
| Created | Aug 17, 2016 |
| Updated | Sep 08, 2016 |
| Risk |
|
| CVE ID | CVE-2016-6292 |
| Exploit Prediction Score | 10.66% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |