CVE-2005-1043: exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and cr...

Security readout for executives and security teams

CVE-2005-1043 is a legacy PHP EXIF parsing flaw. A malicious image metadata header could make vulnerable PHP versions consume memory and crash. The main business risk is service disruption in applications that process attacker-supplied images using affected PHP builds. Exposure is most likely in very old PHP deployments, legacy appliances, or unsupported OS images running PHP before 4.3.11 and processing untrusted image EXIF metadata. Modern supported PHP stacks are unlikely to be affected. Treat as moderate priority unless legacy PHP image processing is internet-facing. Prioritize discovery of obsolete PHP systems, because unsupported runtimes often carry broader accumulated risk beyond this CVE. Mitigation focus: Inventory PHP runtimes and identify any versions before PHP 4.3.11.; Apply vendor fixed packages or upgrade beyond PHP 4.3.11.; Check distribution advisories for backported package names and supported fixes..

Prepared

Jun 29, 2026, 22:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.