Posted by Rik on 06/22/07 15:50

On Fri, 22 Jun 2007 12:57:32 +0200, Schraalhans Keukenmeester
<Schraalhans@the.spamtrapexample.nl> wrote:

> It's been mentioned here a couple of times in different threads regarding
> image uploading. It's not new, but I found a clear explanation of what it
> is and how to deal with it. Hope it helps some of you.
>
> http://www.phpclasses.org/blog/post/67-PHP-security-exploit-with-GIF-images.html
>

I've seen these claims earlier, seems to have something to do with mostly
apache on Windows. Then again, I have not been able to reproduce these
kinds of vulnerabilities without instructing Apache to parse images for
PHP. Other people have claimed their servers do that automagically, I
haven't found the reason why.

--
Rik Wasmus

[Back to original message]