PT-2010-5322 · Php · Php

Mateusz Kocielski · Published 2010-12-07 · Updated 2024-06-15 · CVE-2010-4150

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2 before 5.2.15 PHP versions 5.3 before 5.3.4

Description A double free vulnerability in the imap do open function in the IMAP extension allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

Recommendations For PHP version 5.2, update to version 5.2.15 or later. For PHP version 5.3, update to version 5.3.4 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-4150

DSA-2195-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

Affected Products

Php

References · 146

• http://svn.php.net/viewvc?view=revision&revision=305032 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2010-4150 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-4150 · Security Note
• http://vupen.com/english/advisories/2010/3027 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2010-4150 · Security Note
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10290-1 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=133469208622507&w=2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10344-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2010-4150 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11169-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html · Vendor Advisory