CVE-2010-3063

CVE-2010-3063 affects PHP 5.3.x up to 5.3.2, targeting the mysqlnd extension. The php_mysqlnd_read_error_from_line function miscalculates a buffer length, allowing a heap-based overflow when a crafted input yields a negative length. Public sources (SUSE SUSE- and Gentoo/OpenVAS-related advisories...

CVE-2010-3062: Exposure of Sensitive Information to an Unauthorized Actor

mysqlndwireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to 1 read sensitive memory via a modified length value, which is not properly handled by the phpmysqlndokread function; or 2 trigger a heap-based buffer overflow via a modified length value, which is n...

CVE-2010-3063: Improper Restriction of Operations within the Bounds of a Memory Buffer

The phpmysqlndreaderrorfromline function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used...

CVE-2010-3064: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the phpmysqlndauthwrite function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a long 1 username or 2 database name argument to the a mysqlconnect or b...

PHP Mysqlnd Extension Information Disclosure and Multiple Buffer Overflow Vulnerabilities

The PHP Mysqlnd extension is prone to an information disclosure vulnerability and multiple buffer-overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...