CVE-2010-4657

Опубликовано: 13 нояб. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

Ссылки

https://access.redhat.com/security/cve/cve-2010-4657
Third Party Advisory
https://bugs.launchpad.net/php/%2Bbug/655442
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4657
Issue Tracking
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-4657
Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-4657
Third Party Advisory
https://bugs.launchpad.net/php/%2Bbug/655442
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4657
Issue Tracking
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-4657
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 5.0.0 (включая) до 5.4.4 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.0157

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2010-4657

CVSS3: 7.5

ubuntu

больше 5 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

CVE-2010-4657

redhat

больше 14 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

CVE-2010-4657

CVSS3: 7.5

debian

больше 5 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlText ...

GHSA-mx27-jhrp-2gfm

CVSS3: 7.5

github

около 3 лет назад

PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.

BDU:2022-02599

CVSS3: 7.5

fstec

больше 5 лет назад

Уязвимость компонента XMLWriter интерпретатора языка программирования PHP, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 81%

0.0157

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-772