PT-2010-5485 · Php+1 · Php+1

Maksymilian Arciemowicz · Publicado 2010-12-06 · Atualizado 2018-10-30 · CVE-2010-4409

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.3.3 and earlier

Description The issue is related to an integer overflow in the NumberFormatter::getSymbol (also known as numfmt get symbol) function. This allows context-dependent attackers to cause a denial of service, resulting in an application crash, by providing an invalid argument.

Recommendations For PHP versions 5.3.3 and earlier, consider upgrading to a version where this issue is fixed, as using an invalid argument in the NumberFormatter::getSymbol function can lead to a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-4409

SUSE-SU-2012_0108-1

SUSE-SU-2012_0109-1

SUSE-SU-2013_0051-1

Produtos afetados

Php

Suse

Referências · 48

• 🔥 http://exploit-db.com/exploits/15722 · Exploit
• 🔥 https://exploit-db.com/exploits/15722 · Exploit
• http://vupen.com/english/advisories/2011/0021 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4409 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-08810 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4409 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4599 · Nota de Segurança
• https://bugzilla.novell.com/657910 · Nota
• https://bugzilla.novell.com/736146 · Nota
• https://bdu.fstec.ru/vul/2015-08811 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-08809 · Nota de Segurança
• http://download.novell.com/patch/finder/?keywords=e7ea96f0f245f1bd2f74770ba314e188 · Nota
• http://support.novell.com/security/cve/CVE-2011-4599.html · Nota
• http://ubuntu.com/usn/USN-1042-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-07339 · Nota de Segurança