PT-2013-1339 · Php · Php

Stas · Publicado 2013-06-18 · Atualizado 2016-12-31 · CVE-2013-2110

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.26 PHP versions 5.4.x prior to 5.4.16

Description The issue is related to a heap-based buffer overflow in the php quot print encode function. This can be exploited by remote attackers to cause a denial of service, potentially leading to an application crash. The exploitation is possible via a crafted argument to the quoted printable encode function.

Recommendations For PHP versions prior to 5.3.26, update to version 5.3.26 or later. For PHP versions 5.4.x prior to 5.4.16, update to version 5.4.16 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2022-02636

CVE-2013-2110

MGASA-2013-0172

MGASA-2013-0176

Produtos afetados

Php

Referências · 17

• https://advisories.mageia.org/MGASA-2013-0172.html · Nota de Segurança
• https://bugs.php.net/bug.php?id=64879 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=10456 · Nota
• https://osv.dev/vulnerability/MGASA-2013-0176 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2013-0172 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2110 · Nota de Segurança
• http://php.net/archive/2013.php#id2013-06-06-2 · Nota
• http://ubuntu.com/usn/USN-1872-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2022-02636 · Nota de Segurança
• http://lwn.net/Vulnerabilities/559055 · Nota
• http://support.apple.com/kb/HT5880 · Nota
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2013-0176.html · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2110 · Nota
• http://php.net/ChangeLog-5.php · Nota