Launchpad CVE tracker

CVE 2009-3292

Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."

Related bugs and status

CVE-2009-3292 (Candidate) is related to these bugs:

Bug #239513: [SRU] stack smashing detected when calling xmlrpc_set_type

		In	Importance	Status
239513	[SRU] stack smashing detected when calling xmlrpc_set_type	php5 (Ubuntu)	Undecided	Fix Released
239513	[SRU] stack smashing detected when calling xmlrpc_set_type	php	Unknown	Unknown
239513	[SRU] stack smashing detected when calling xmlrpc_set_type	php5 (Ubuntu Hardy)	Undecided	Fix Released
239513	[SRU] stack smashing detected when calling xmlrpc_set_type	php5 (Ubuntu Intrepid)	Undecided	Fix Released
239513	[SRU] stack smashing detected when calling xmlrpc_set_type	php5 (Ubuntu Jaunty)	Undecided	Fix Released

Bug #446313: [ffe] security upgrade to php 5.2.11

Summary				In	Importance	Status
	446313	[ffe] security upgrade to php 5.2.11		php5 (Ubuntu)	Wishlist	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2009-3292

References