exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion.
Affected Platforms
Apple Mac Os X ServerApple Mac Os XPeachtree Peachtree LinuxPhp PhpSgi PropackConectiva LinuxSuse Suse Linux