Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-4645
HistoryJan 11, 2011 - 3:00 a.m.

CVE-2010-4645

2011-01-1103:00:00
CWE-189
[email protected]
web.nvd.nist.gov
134
cve-2010-4645
strtod.c
php 5.2
php 5.3
dos
nvd
vulnerability
security advisory

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.0%

JSON

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

References

Related

openvas 37
fedora 8
nessus 22
slackware 1
f5 4
freebsd 1
checkpoint_security 1
prion 1
ubuntucve 1
oraclelinux 2
centos 1
redhat 2
ubuntu 1
securityvulns 4
gentoo 1
openvas
openvas
Slackware Advisory SSA:2011-010-01 php
2012-09-11 00:00:00
Fedora Update for maniadrive FEDORA-2011-0321
2011-01-24 00:00:00
Fedora Update for php FEDORA-2011-0329
2011-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: maniadrive-1.2-26.fc13.1
2011-01-21 23:05:26
[SECURITY] Fedora 14 Update: maniadrive-data-1.2-5.fc14
2011-01-21 22:58:10
[SECURITY] Fedora 13 Update: php-eaccelerator-0.9.6.1-4.fc13
2011-01-21 23:05:26
nessus
nessus
PHP 5.2 < 5.2.17 / 5.3 < 5.3.5 String To Double Conversion DoS
2011-01-07 00:00:00
Fedora 14 : maniadrive-1.2-26.fc14.1 / maniadrive-data-1.2-5.fc14 / php-5.3.5-1.fc14 / etc (2011-0329)
2011-01-24 00:00:00
FreeBSD : php -- multiple vulnerabilities (2b6ed5c7-1a7f-11e0-b61d-000c29d1636d)
2011-01-10 00:00:00
slackware
slackware
[slackware-security] php
2011-01-11 00:47:45
f5
f5
K12650 : PHP vulnerability CVE-2010-4645
2013-07-05 00:00:00
SOL12650 - PHP vulnerability CVE-2010-4645
2011-02-28 00:00:00
SOL13518 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2011-01-06 00:00:00
checkpoint_security
checkpoint_security
Check Point's response to PHP Floating-Point Value Denial of Service Vulnerability (CVE-2010-4645)
2011-01-24 22:00:00
prion
prion
Design/Logic Flaw
2011-01-11 03:00:00
ubuntucve
ubuntucve
CVE-2010-4645
2011-01-11 00:00:00
oraclelinux
oraclelinux
php53 security update
2011-02-03 00:00:00
php security update
2011-02-10 00:00:00
centos
centos
php53 security update
2011-04-14 23:48:18
redhat
redhat
(RHSA-2011:0196) Moderate: php53 security update
2011-02-03 00:00:00
(RHSA-2011:0195) Moderate: php security update
2011-02-03 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2011-01-11 00:00:00
securityvulns
securityvulns
[USN-1042-1] PHP vulnerabilities
2011-01-13 00:00:00
[ GLSA 201110-06 ] PHP: Multiple vulnerabilities
2011-10-12 00:00:00
Apple OS X multiple security vulnerabilities
2011-10-24 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.0%

JSON
Related for CVE-2010-4645
openvas37fedora8nessus22slackware1f54freebsd1checkpoint_security1prion1ubuntucve1oraclelinux2centos1redhat2ubuntu1securityvulns4gentoo1