PT-2011-2908 · Php · Php

Vincent Danen · Publicado 2011-03-16 · Atualizado 2024-06-15 · CVE-2011-1153

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.5

Description The issue allows context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend throw exception ex call.

Recommendations For PHP versions prior to 5.3.5, update to a version newer than 5.3.5 to resolve the issue.

Correção

DoS

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2011-1153

DSA-2266-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

Produtos afetados

Php

Referências · 144

• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2006-1494 · Nota
• https://suse.com/security/cve/CVE-2015-3415 · Nota
• https://suse.com/security/cve/CVE-2020-7063 · Nota
• https://suse.com/security/cve/CVE-2012-2336 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota
• https://suse.com/security/cve/CVE-2011-3379 · Nota
• https://suse.com/security/cve/CVE-2013-1643 · Nota
• https://suse.com/security/cve/CVE-2019-9024 · Nota
• https://suse.com/security/cve/CVE-2015-3416 · Nota
• https://suse.com/security/cve/CVE-2013-4248 · Nota