PT-2010-3703 · Php · Php

Publicado 2010-05-27 · Atualizado 2010-12-07 · CVE-2010-2093

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2 before 5.2.13 PHP versions 5.3 before 5.3.2

Description A use-after-free issue in the request shutdown functionality allows context-dependent attackers to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.

Recommendations For PHP versions 5.2 before 5.2.13, update to version 5.2.13 or later. For PHP versions 5.3 before 5.3.2, update to version 5.3.2 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-2093

Produtos afetados

Php

Referências · 5

• 🔥 http://php-security.org/2010/05/12/mops-2010-022-php-stream-context-use-after-free-on-request-shutdown-vulnerability/index.html · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2093 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2093 · Nota de Segurança