iDEFENSE Security Advisory 03.31.05 – Remote exploitation of multiple denial of service vulnerabilities in the PHP Group’s PHP scripting language allows attackers to consume CPU resources. The vulnerable routines, php_handle_iff() and php_handle_jpeg(), are reachable from the PHP function getimagesize(). iDEFENSE has confirmed the existence of these vulnerabilities in PHP versions 4.2.2, 4.3.9, 4.3.10 and 5.0.3.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36935/03.31.05.txt
Source: https://packetstormsecurity.com/files/36935/iDEFENSE-Security-Advisory-2005-03-31.t.html

