Lucene search

K
freebsdFreeBSDA2074AC6-124C-11DE-A964-0030843D3802
HistoryDec 21, 2008 - 12:00 a.m.

php-mbstring -- php mbstring buffer overflow vulnerability

2008-12-2100:00:00
vuxml.freebsd.org
51

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.037 Low

EPSS

Percentile

91.7%

SecurityFocus reports:

PHP is prone to a buffer-overflow vulnerability because it fails to
perform boundary checks before copying user-supplied data to
insufficiently sized memory buffers. The issue affects the β€˜mbstring’
extension included in the standard distribution.
An attacker can exploit this issue to execute arbitrary machine
code in the context of the affected webserver. Failed exploit attempts
will likely crash the webserver, denying service to legitimate
users.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphp4-mbstring<Β 4.4.9UNKNOWN
FreeBSDanynoarchphp5-mbstring<Β 5.2.9UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.037 Low

EPSS

Percentile

91.7%