PT-2011-1613 · Php+1 · Php+1

Rick Regan · Publicado 2011-01-11 · Atualizado 2024-06-15 · CVE-2010-4645

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2 through 5.2.16 PHP versions 5.3 through 5.3.4

Description The issue allows context-dependent attackers to cause a denial of service, resulting in an infinite loop, via a certain floating-point value in scientific notation. This value is not properly handled in x87 FPU registers, as demonstrated using the value 2.2250738585072011e-308.

Recommendations For PHP versions 5.2 through 5.2.16, update to version 5.2.17 or later. For PHP versions 5.3 through 5.3.4, update to version 5.3.5 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-4645

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2011:0195

RHSA-2011:0196

RHSA-2011_0195

RHSA-2011_0196

Produtos afetados

Php

Red Hat

Referências · 171

• 🔥 http://securityfocus.com/bid/45668 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/01/05/2 · Exploit
• 🔥 https://exploit-db.com/exploits/35164 · Exploit
• 🔥 http://bugs.php.net/53632 · Exploit
• https://suse.com/security/cve/CVE-2015-3152 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10344-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2325 · Nota
• https://suse.com/security/cve/CVE-2006-7243 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4645 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-0235 · Nota
• http://exploit-db.com/exploits/15431 · Nota
• http://vupen.com/english/advisories/2011/0066 · Nota
• https://suse.com/security/cve/CVE-2011-1092 · Nota
• https://suse.com/security/cve/CVE-2019-11046 · Nota
• http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html · Nota