CVE-2013-2110

Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted argument to the quoted_printable_encode function.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.php.net/ChangeLog-5.php
https://bugs.php.net/bug.php?id=64879
http://www.ubuntu.com/usn/USN-1872-1
http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
http://support.apple.com/kb/HT5880
http://www.securityfocus.com/bid/60411

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:php:php:5.3.20:::::::*
	cpe:2.3:a:php:php:5.3.12:::::::*
	cpe:2.3:a:php:php:5.3.8:::::::*
	cpe:2.3:a:php:php:5.3.5:::::::*
	cpe:2.3:a:php:php:5.3.9:::::::*
	cpe:2.3:a:php:php:5.2.12:::::::*
	cpe:2.3:a:php:php:5.2.10:::::::*
	cpe:2.3:a:php:php:5.2.6:::::::*
	cpe:2.3:a:php:php:5.2.4:::::::*
	cpe:2.3:a:php:php:5.1.1:::::::*
	cpe:2.3:a:php:php:5.1.0:::::::*
	cpe:2.3:a:php:php:4.0:beta4::::::
	cpe:2.3:a:php:php:3.0.2:::::::*
	cpe:2.3:a:php:php:5.0.0:beta1::::::
	cpe:2.3:a:php:php:4.1.0:::::::*
	cpe:2.3:a:php:php:5.3.15:::::::*
	cpe:2.3:a:php:php:3.0.8:::::::*
	cpe:2.3:a:php:php:4.4.2:::::::*
	cpe:2.3:a:php:php:3.0.7:::::::*
	cpe:2.3:a:php:php:4.0.7:::::::*
	cpe:2.3:a:php:php:5.3.22:::::::*
	cpe:2.3:a:php:php:4.4.3:::::::*
	cpe:2.3:a:php:php:5.3.23:::::::*
	cpe:2.3:a:php:php:3.0.4:::::::*
	cpe:2.3:a:php:php:4.0.6:::::::*
	cpe:2.3:a:php:php:3.0.18:::::::*
	cpe:2.3:a:php:php:4.2.1:::::::*
	cpe:2.3:a:php:php:5.0.0:rc1::::::
	cpe:2.3:a:php:php:4.4.6:::::::*
	cpe:2.3:a:php:php:5.0.0:beta4::::::
	cpe:2.3:a:php:php:5.0.0:::::::*
	cpe:2.3:a:php:php:4.3.5:::::::*
	cpe:2.3:a:php:php:4.4.7:::::::*
	cpe:2.3:a:php:php:3.0:::::::*
	cpe:2.3:a:php:php:5.2.9:::::::*
	cpe:2.3:a:php:php:5.3.10:::::::*
	cpe:2.3:a:php:php:5.1.5:::::::*
	cpe:2.3:a:php:php:5.3.6:::::::*
	cpe:2.3:a:php:php:5.1.2:::::::*
	cpe:2.3:a:php:php:5.3.1:::::::*
	cpe:2.3:a:php:php:3.0.1:::::::*
	cpe:2.3:a:php:php:5.2.16:::::::*
	cpe:2.3:a:php:php:5.2.7:::::::*
	cpe:2.3:a:php:php:5.2.2:::::::*
	cpe:2.3:a:php:php:5.0.5:::::::*
	cpe:2.3:a:php:php:4.3.6:::::::*
	cpe:2.3:a:php:php:5.3.14:::::::*
	cpe:2.3:a:php:php:5.0.4:::::::*
	cpe:2.3:a:php:php:4.2.2:::::::*
	cpe:2.3:a:php:php:5.3.21:::::::*
	cpe:2.3:a:php:php:4.3.3:::::::*
	cpe:2.3:a:php:php:4.1.1:::::::*
	cpe:2.3:a:php:php:3.0.16:::::::*
	cpe:2.3:a:php:php:5.2.11:::::::*
	cpe:2.3:a:php:php:5.2.17:::::::*
	cpe:2.3:a:php:php:5.3.0:::::::*
	cpe:2.3:a:php:php:5.0.0:rc2::::::
	cpe:2.3:a:php:php:5.3.3:::::::*
	cpe:2.3:a:php:php:5.0.3:::::::*
	cpe:2.3:a:php:php:5.3.7:::::::*
	cpe:2.3:a:php:php:4.4.5:::::::*
	cpe:2.3:a:php:php:5.0.0:rc3::::::
	cpe:2.3:a:php:php:5.2.0:::::::*
	cpe:2.3:a:php:php:4.1.2:::::::*
cpe:2.3:a:php:php:5.3.17:::::::*
cpe:2.3:a:php:php:5.3.16:::::::*
cpe:2.3:a:php:php:5.1.3:::::::*
cpe:2.3:a:php:php:4.0:beta_4_patch1::::::
cpe:2.3:a:php:php:4.4.0:::::::*
cpe:2.3:a:php:php:1.0:::::::*
cpe:2.3:a:php:php:5.0.2:::::::*
cpe:2.3:a:php:php:5.2.15:::::::*
cpe:2.3:a:php:php:4.4.1:::::::*
cpe:2.3:a:php:php:4.0:beta3::::::
cpe:2.3:a:php:php:5.2.1:::::::*
cpe:2.3:a:php:php:3.0.9:::::::*
cpe:2.3:a:php:php:5.2.8:::::::*
cpe:2.3:a:php:php:4.3.9:::::::*
cpe:2.3:a:php:php:4.4.9:::::::*
cpe:2.3:a:php:php:4.0:beta1::::::
cpe:2.3:a:php:php:3.0.5:::::::*
cpe:2.3:a:php:php:3.0.11:::::::*
cpe:2.3:a:php:php:4.2.0:::::::*
cpe:2.3:a:php:php:5.3.18:::::::*
cpe:2.3:a:php:php:5.2.14:::::::*
cpe:2.3:a:php:php:4.4.4:::::::*
cpe:2.3:a:php:php:5.1.6:::::::*
cpe:2.3:a:php:php:5.3.24:::::::*
cpe:2.3:a:php:php:4.3.4:::::::*
cpe:2.3:a:php:php:4.0.4:::::::*
cpe:2.3:a:php:php:4.3.0:::::::*
cpe:2.3:a:php:php:4.0.5:::::::*
cpe:2.3:a:php:php:3.0.13:::::::*
cpe:2.3:a:php:php:5.0.1:::::::*
cpe:2.3:a:php:php:5.1.4:::::::*
cpe:2.3:a:php:php:5.2.5:::::::*
cpe:2.3:a:php:php:4.3.7:::::::*
cpe:2.3:a:php:php:4.3.2:::::::*
cpe:2.3:a:php:php:4.3.11:::::::*
cpe:2.3:a:php:php:4.0.0:::::::*
cpe:2.3:a:php:php:3.0.6:::::::*
cpe:2.3:a:php:php:3.0.17:::::::*
cpe:2.3:a:php:php:4.0.2:::::::*
cpe:2.3:a:php:php:2.0:::::::*
cpe:2.3:a:php:php:3.0.15:::::::*
cpe:2.3:a:php:php:5.2.3:::::::*
cpe:2.3:a:php:php:3.0.10:::::::*
cpe:2.3:a:php:php:4.2.3:::::::*
cpe:2.3:a:php:php:5.2.13:::::::*
cpe:2.3:a:php:php:4.0:beta2::::::
cpe:2.3:a:php:php:2.0b10:::::::*
cpe:2.3:a:php:php:4.4.8:::::::*
cpe:2.3:a:php:php:5.3.11:::::::*
cpe:2.3:a:php:php:5.0.0:beta3::::::
cpe:2.3:a:php:php:5.3.2:::::::*
cpe:2.3:a:php:php:5.3.4:::::::*
cpe:2.3:a:php:php:4.3.1:::::::*
cpe:2.3:a:php:php:4.3.10:::::::*
cpe:2.3:a:php:php:4.0.1:::::::*
cpe:2.3:a:php:php::::::::
cpe:2.3:a:php:php:3.0.12:::::::*
cpe:2.3:a:php:php:5.3.13:::::::*
cpe:2.3:a:php:php:4.0.3:::::::*
cpe:2.3:a:php:php:3.0.14:::::::*
cpe:2.3:a:php:php:3.0.3:::::::*
cpe:2.3:a:php:php:5.3.19:::::::*
cpe:2.3:a:php:php:4.3.8:::::::*
cpe:2.3:a:php:php:5.0.0:beta2::::::

Configuration 2 (hide)

OR	cpe:2.3:a:php:php:5.4.2:::::::*
	cpe:2.3:a:php:php:5.4.11:::::::*
	cpe:2.3:a:php:php:5.4.12:::::::*
	cpe:2.3:a:php:php:5.4.13:::::::*
	cpe:2.3:a:php:php:5.4.3:::::::*
	cpe:2.3:a:php:php:5.4.0:::::::*
	cpe:2.3:a:php:php:5.4.1:::::::*
	cpe:2.3:a:php:php:5.4.6:::::::*
	cpe:2.3:a:php:php:5.4.5:::::::*
	cpe:2.3:a:php:php:5.4.4:::::::*
	cpe:2.3:a:php:php:5.4.8:::::::*
	cpe:2.3:a:php:php:5.4.15:::::::*
	cpe:2.3:a:php:php:5.4.14:::::::*
	cpe:2.3:a:php:php:5.4.9:::::::*
	cpe:2.3:a:php:php:5.4.10:::::::*
	cpe:2.3:a:php:php:5.4.7:::::::*

Information

Published : 2013-06-21 13:55

Updated : 2016-12-30 18:59

NVD link : CVE-2013-2110

Mitre link : CVE-2013-2110

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Products Affected

php

5.0 /10