PT-2010-4520 · Php · Php+1

Published 2010-08-20 · Updated 2010-12-07 · CVE-2010-3063

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 5.3 through 5.3.2

Description The issue arises from a miscalculation of a buffer length in the php mysqlnd read error from line function within the Mysqlnd extension. This allows attackers to trigger a heap-based buffer overflow by providing crafted inputs that result in a negative length value.

Recommendations For PHP versions 5.3 through 5.3.2, consider updating to a version where this issue is resolved, as the provided information does not specify a direct fix for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3063

Affected Products

Mysqlnd

Php

References · 7

• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3063 · Security Note
• http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?r1=298701&r2=298703&pathrev=298703 · Patch
• http://php-security.org/2010/05/31/mops-2010-058-php-php_mysqlnd_read_error_from_line-buffer-overflow-vulnerability/index.html · Note
• http://svn.php.net/viewvc?view=revision&revision=298703 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3063 · Note