5
CVSSv2

CVE-2010-1917

Published: 12/05/2010 Updated: 17/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Stack consumption vulnerability in PHP 5.2 up to and including 5.2.13 and 5.3 up to and including 5.3.2 allows context-dependent malicious users to cause a denial of service (PHP crash) via a crafted first argument to the fnmatch function, as demonstrated using a long string.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.2.3

php php 5.2.4

php php 5.2.12

php php 5.2.13

php php 5.2.0

php php 5.2.1

php php 5.2.2

php php 5.2.10

php php 5.2.11

php php 5.2.5

php php 5.2.6

php php 5.2.8

php php 5.2.9

php php 5.3.0

php php 5.3.1

php php 5.3.2

Vendor Advisories

Auke van Slooten discovered that PHP incorrectly handled certain xmlrpc requests An attacker could exploit this issue to cause the PHP server to crash, resulting in a denial of service This issue only affected Ubuntu 606 LTS, 804 LTS, 904 and 910 (CVE-2010-0397) ...
Several remote vulnerabilities have been discovered in PHP 5, an hypertext preprocessor The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-1917 The fnmatch function can be abused to conduct denial of service attacks (by crashing the interpreter) by the means of a stack overflow CVE-2010-2225 ...