PT-2013-1339 · Php · Php

Stas · Published 2013-06-18 · Updated 2016-12-31 · CVE-2013-2110

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.26 PHP versions 5.4.x prior to 5.4.16

Description The issue is related to a heap-based buffer overflow in the php quot print encode function. This can be exploited by remote attackers to cause a denial of service, potentially leading to an application crash. The exploitation is possible via a crafted argument to the quoted printable encode function.

Recommendations For PHP versions prior to 5.3.26, update to version 5.3.26 or later. For PHP versions 5.4.x prior to 5.4.16, update to version 5.4.16 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-02636

CVE-2013-2110

MGASA-2013-0172

MGASA-2013-0176

Affected Products

Php

References · 17

• https://advisories.mageia.org/MGASA-2013-0172.html · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0176 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0172 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2110 · Security Note
• http://ubuntu.com/usn/USN-1872-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02636 · Security Note
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0176.html · Security Note
• https://bugs.php.net/bug.php?id=64879 · Note
• https://bugs.mageia.org/show_bug.cgi?id=10456 · Note
• http://php.net/archive/2013.php#id2013-06-06-2 · Note
• http://lwn.net/Vulnerabilities/559055 · Note
• http://support.apple.com/kb/HT5880 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2110 · Note
• http://php.net/ChangeLog-5.php · Note