CVE-2005-0524: The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimage...

Security readout for executives and security teams

CVE-2005-0524 is an old PHP denial-of-service issue. A specially malformed image processed through PHP's getimagesize function could make affected PHP versions loop indefinitely, consuming service capacity. It matters mainly where legacy PHP 4 or early PHP 5 systems still process untrusted image files. Exposure is most plausible in legacy PHP applications that accept or fetch attacker-controlled image files and call getimagesize. Modern supported PHP deployments are unlikely to run the specifically named versions, but unmanaged legacy servers, embedded stacks, or old distribution packages should be checked. Treat this as a legacy risk cleanup item unless affected PHP versions are still internet-facing. If found in production, prioritize upgrade or isolation because a low-skill remote denial of service could affect availability. Mitigation focus: Identify any PHP 4.x or PHP 5.0.3 systems still in service.; Follow the relevant vendor advisory for package updates or replacement.; Restrict untrusted image processing until affected runtimes are removed..

Prepared

Jun 29, 2026, 22:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.