PT-2014-1420 · Php+2 · Php+2

Publicado 2014-08-23 · Atualizado 2024-06-15 · CVE-2014-5120

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.4.x through 5.4.31 PHP versions 5.5.x through 5.5.15

Description The issue exists in the GD component of PHP due to the presence of %00 sequences in pathnames. This allows remote attackers to overwrite arbitrary files by providing crafted input to applications that call certain functions, including imagegd, imagegd2, imagegif, imagejpeg, imagepng, imagewbmp, or imagewebp.

Recommendations For PHP versions 5.4.x through 5.4.31, update to version 5.4.32 or later. For PHP versions 5.5.x through 5.5.15, update to version 5.5.16 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-00375

CESA-2014_1327

CVE-2014-5120

MGASA-2014-0367

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

RHSA-2014:1327

RHSA-2014:1765

RHSA-2014:1766

RHSA-2014_1327

Produtos afetados

Centos

Php

Red Hat

Referências · 130

• https://github.com/php/php-src/commit/7ba1409a1aee5925180de546057ddd84ff267947 · Nota
• https://github.com/file/file/commit/758e066df72fb1ac08d2eea91ddc3973d259e991 · Nota
• https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08 · Nota
• https://github.com/file/file/commit/0641e56be1af003aa02c7c6b0184466540637233 · Nota
• https://github.com/file/file/commit/4a284c89d6ef11aca34da65da7d673050a5ea320 · Nota
• https://github.com/file/file/commit/74cafd7de9ec99a14f4480927580e501c8f852c3 · Nota
• https://github.com/file/file/commit/71a8b6c0d758acb0f73e2e51421a711b5e9d6668 · Nota
• https://suse.com/security/cve/CVE-2015-3152 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10344-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-2325 · Nota
• https://suse.com/security/cve/CVE-2006-7243 · Nota
• https://suse.com/security/cve/CVE-2015-0235 · Nota
• http://php.net/ChangeLog-5.php#5.5.16 · Nota
• https://suse.com/security/cve/CVE-2011-1092 · Nota
• https://advisories.mageia.org/MGASA-2014-0367.html · Nota de Segurança