PT-2010-3540 · Php+1 · Php+1
Publicado
2010-05-12
·
Atualizado
2017-08-17
·
CVE-2010-1917
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
PHP versions 5.2 through 5.2.13
PHP versions 5.3 through 5.3.2
Description
A stack consumption issue allows context-dependent attackers to cause a denial of service, resulting in a PHP crash, by providing a crafted first argument to the
fnmatch function, such as a long string.Recommendations
For PHP versions 5.2 through 5.2.13, update to a version outside of this range to resolve the issue.
For PHP versions 5.3 through 5.3.2, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting the use of the
fnmatch function with untrusted input until a patch is available.Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Php
Red Hat