Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3717
typo3
validemail
denial of service
cve-2010-3717
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.4
Confidence
Low
EPSS
0.078
Percentile
94.3%
The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710.
Affected configurations
Node
typo3typo3Match4.2.0
ORtypo3typo3Match4.2.1
ORtypo3typo3Match4.2.2
ORtypo3typo3Match4.2.3
ORtypo3typo3Match4.2.4
ORtypo3typo3Match4.2.5
ORtypo3typo3Match4.2.6
ORtypo3typo3Match4.2.7
ORtypo3typo3Match4.2.8
ORtypo3typo3Match4.2.9
ORtypo3typo3Match4.2.10
ORtypo3typo3Match4.2.11
ORtypo3typo3Match4.2.12
ORtypo3typo3Match4.2.13
ORtypo3typo3Match4.2.14
ORtypo3typo3Match4.3.0
ORtypo3typo3Match4.3.1
ORtypo3typo3Match4.3.2
ORtypo3typo3Match4.3.3
ORtypo3typo3Match4.3.4
ORtypo3typo3Match4.3.5
ORtypo3typo3Match4.3.6
ORtypo3typo3Match4.4
ORtypo3typo3Match4.4.1
ORtypo3typo3Match4.4.2
ORtypo3typo3Match4.4.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| typo3 | typo3 | 4.2.3 | cpe:/a:typo3:typo3:4.2.3::: |
| typo3 | typo3 | 4.2.0 | cpe:/a:typo3:typo3:4.2.0::: |
| typo3 | typo3 | 4.2.12 | cpe:/a:typo3:typo3:4.2.12::: |
| typo3 | typo3 | 4.3.0 | cpe:/a:typo3:typo3:4.3.0::: |
| typo3 | typo3 | 4.3.5 | cpe:/a:typo3:typo3:4.3.5::: |
| typo3 | typo3 | 4.2.14 | cpe:/a:typo3:typo3:4.2.14::: |
| typo3 | typo3 | 4.2.10 | cpe:/a:typo3:typo3:4.2.10::: |
| typo3 | typo3 | 4.2.1 | cpe:/a:typo3:typo3:4.2.1::: |
| typo3 | typo3 | 4.3.1 | cpe:/a:typo3:typo3:4.3.1::: |
| typo3 | typo3 | 4.2.8 | cpe:/a:typo3:typo3:4.2.8::: |
Related
cvelist
cvelist
CVE-2010-3717
2022-10-03 16:20:55
CVE-2010-3710
2010-10-25 19:00:00
ubuntucve
ubuntucve
CVE-2010-3717
2010-10-25 00:00:00
CVE-2010-3710
2010-10-25 00:00:00
nvd
nvd
CVE-2010-3717
2010-10-25 20:01:04
CVE-2010-3710
2010-10-25 20:01:03
prion
prion
Design/Logic Flaw
2010-10-25 20:01:00
Stack overflow
2010-10-25 20:01:00
debian
debian
[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
2010-10-19 20:07:09
[SECURITY] [DSA 2195-1] php5 security update
2011-03-19 23:49:52
securityvulns
securityvulns
[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
2010-10-24 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-10-24 00:00:00
[ MDVSA-2010:218 ] php
2010-11-02 00:00:00
openvas
openvas
Debian Security Advisory DSA 2121-1 (typo3-src)
2010-11-17 00:00:00
Debian: Security Advisory (DSA-2121-1)
2010-11-17 00:00:00
TYPO3 Multiple Vulnerabilities (Oct 2010)
2014-01-09 00:00:00
nessus
nessus
Debian DSA-2121-1 : typo3-src - several vulnerabilities
2010-10-20 00:00:00
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7221)
2010-12-03 00:00:00
osv
osv
typo3-src - several vulnerabilities
2010-10-19 00:00:00
php5 - several
2011-03-19 00:00:00
cve
cve
CVE-2010-3710
2010-10-25 20:01:03
freebsd
freebsd
php-filter -- Denial of Service
2010-12-13 00:00:00
redhat
redhat
(RHSA-2011:0196) Moderate: php53 security update
2011-02-03 00:00:00
oraclelinux
oraclelinux
php53 security update
2011-02-03 00:00:00
centos
centos
php53 security update
2011-04-14 23:48:18
ubuntu
ubuntu
PHP vulnerabilities
2011-01-11 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: maniadrive-1.2-23.fc13
2011-01-04 20:53:11
[SECURITY] Fedora 13 Update: php-eaccelerator-0.9.6.1-3.fc13
2011-01-04 20:53:11
[SECURITY] Fedora 14 Update: php-5.3.4-1.fc14.1
2011-01-04 20:55:36
f5
f5
K13519 : Multiple PHP vulnerabilities
2013-09-20 00:00:00
SOL13519 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.4
Confidence
Low
EPSS
0.078
Percentile
94.3%
Related for CVE-2010-3717