On 5/13/06, Paul Laudanski <zx@xxxxxxxxxxxxxx> wrote:
I'd sure love to see the POC on this one. PHP by default needs exif to be enabled during installation in order to work with the image meta data. So in theory not enabling exif should cause this to be benign.
you misunderstanding the usage
(3) inject some php code inside jpeg files as EXIF metadata content: this, "in combinations with third party vulnerable code" can be used to compromise the server where PHP is installed.
note the text in quotesmeaning with another vulnerable script, such as one you can exploit to include a local files
so allowing the avatar images to go unchecked would make exploitation easier in such a case
_________________________________________________________________On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement