CVE-2009-3293

2009-09-2210:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-3293

php

imagecolortransparent

vulnerability

nvd

6.1 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.9%

JSON

Unspecified vulnerability in the imagecolortransparent function in PHP before 5.2.11 has unknown impact and attack vectors related to an incorrect “sanity check for the color index.”

CPENameOperatorVersion
php:phpphpeq4.3.9
php:phpphpeq4.4.9
php:phpphpeq3.0
php:phpphpeq5.2.9
php:phpphpeq4.0
php:phpphpeq3.0.5
php:phpphpeq3.0.11
php:phpphpeq5.1.5
php:phpphpeq5.1.2
php:phpphpeq4.2.0

CPE	Name	Operator	Version
php:php	php	eq	4.3.9
php:php	php	eq	4.4.9
php:php	php	eq	3.0
php:php	php	eq	5.2.9
php:php	php	eq	4.0
php:php	php	eq	3.0.5
php:php	php	eq	3.0.11
php:php	php	eq	5.1.5
php:php	php	eq	5.1.2
php:php	php	eq	4.2.0