CVE-2012-2688

2012-07-2010:40:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

560

cve-2012-2688

vulnerability

php

remote attack vectors

overflow

nvd

6.3 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.163 Low

EPSS

Percentile

95.9%

JSON

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an “overflow.”

CPENameOperatorVersion
php:phpphpeq4.3.9
php:phpphpeq4.4.9
php:phpphpeq3.0
php:phpphpeq5.2.9
php:phpphpeq4.0
php:phpphpeq3.0.5
php:phpphpeq3.0.11
php:phpphpeq5.3.10
php:phpphpeq5.1.5
php:phpphpeq5.3.6

CPE	Name	Operator	Version
php:php	php	eq	4.3.9
php:php	php	eq	4.4.9
php:php	php	eq	3.0
php:php	php	eq	5.2.9
php:php	php	eq	4.0
php:php	php	eq	3.0.5
php:php	php	eq	3.0.11
php:php	php	eq	5.3.10
php:php	php	eq	5.1.5
php:php	php	eq	5.3.6