Lucene search

[email protected]CVE-2010-4645

HistoryJan 11, 2011 - 3:00 a.m.

CVE-2010-4645

2011-01-1103:00:04

CWE-189

[email protected]

web.nvd.nist.gov

134

cve-2010-4645

strtod.c

php 5.2

php 5.3

dos

nvd

vulnerability

security advisory

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.5

Confidence

High

EPSS

0.021

Percentile

89.2%

JSON

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

Affected configurations

NVD

Node

phpphpMatch5.2.0

phpphpMatch5.2.1

phpphpMatch5.2.2

phpphpMatch5.2.3

phpphpMatch5.2.4

phpphpMatch5.2.5

phpphpMatch5.2.6

phpphpMatch5.2.7

phpphpMatch5.2.8

phpphpMatch5.2.9

phpphpMatch5.2.10

phpphpMatch5.2.11

phpphpMatch5.2.12

phpphpMatch5.2.13

phpphpMatch5.2.14

phpphpMatch5.2.15

phpphpMatch5.2.16

Node

phpphpMatch5.3.0

phpphpMatch5.3.1

phpphpMatch5.3.2

phpphpMatch5.3.3

phpphpMatch5.3.4

VendorProductVersionCPE
phpphp5.2.3cpe:/a:php:php:5.2.3:::
phpphp5.2.0cpe:/a:php:php:5.2.0:::
phpphp5.2.12cpe:/a:php:php:5.2.12:::
phpphp5.2.13cpe:/a:php:php:5.2.13:::
phpphp5.2.5cpe:/a:php:php:5.2.5:::
phpphp5.2.16cpe:/a:php:php:5.2.16:::
phpphp5.2.10cpe:/a:php:php:5.2.10:::
phpphp5.2.8cpe:/a:php:php:5.2.8:::
phpphp5.2.6cpe:/a:php:php:5.2.6:::
phpphp5.2.7cpe:/a:php:php:5.2.7:::

Vendor	Product	Version	CPE
php	php	5.2.3	cpe:/a:php:php:5.2.3:::
php	php	5.2.0	cpe:/a:php:php:5.2.0:::
php	php	5.2.12	cpe:/a:php:php:5.2.12:::
php	php	5.2.13	cpe:/a:php:php:5.2.13:::
php	php	5.2.5	cpe:/a:php:php:5.2.5:::
php	php	5.2.16	cpe:/a:php:php:5.2.16:::
php	php	5.2.10	cpe:/a:php:php:5.2.10:::
php	php	5.2.8	cpe:/a:php:php:5.2.8:::
php	php	5.2.6	cpe:/a:php:php:5.2.6:::
php	php	5.2.7	cpe:/a:php:php:5.2.7:::