Lucene search
Ubuntu.comUB:CVE-2008-5498HistoryDec 26, 2008 - 12:00 a.m.
CVE-2008-5498
2008-12-2600:00:00
ubuntu.com
ubuntu.com
11
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.015 Low
EPSS
Percentile
86.7%
Array index error in the imageRotate function in PHP 5.2.8 and earlier
allows context-dependent attackers to read the contents of arbitrary memory
locations via a crafted value of the third argument (aka the bgd_color or
clrBack argument) for an indexed image.
Notes
| Author | Note |
|---|---|
| jdstrand | php5 on Ubuntu is linked against libgd2, which is not affected |
Related
prion
prion
Memory corruption
2008-12-26 20:30:00
nessus
nessus
Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : php (SSA:2009-098-02)
2009-04-08 00:00:00
PHP 5.x < 5.2.9 Multiple Vulnerabilities
2009-03-02 00:00:00
freebsd
freebsd
php5-gd -- uninitialized memory information disclosure vulnerability
2008-12-24 00:00:00
seebug
seebug
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
2014-07-01 00:00:00
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
2009-01-03 00:00:00
PHP imageRotate()未初始化内存信息泄露漏洞
2008-12-30 00:00:00
openvas
openvas
FreeBSD Ports: php5-gd
2009-01-07 00:00:00
PHP 'imageRotate()' Memory Information Disclosure Vulnerability
2008-12-31 00:00:00
Slackware Advisory SSA:2009-098-02 php
2012-09-11 00:00:00
exploitpack
exploitpack
PHP 5.2.8 gd library - imageRotate() Information Leak
2009-01-02 00:00:00
cve
cve
CVE-2008-5498
2008-12-26 20:30:00
veracode
veracode
Information Disclosure
2020-04-10 00:31:23
slackware
slackware
php
2009-04-07 23:29:51
debiancve
debiancve
CVE-2008-5498
2008-12-26 20:30:00
exploitdb
exploitdb
PHP 5.2.8 gd library - 'imageRotate()' Information Leak
2009-01-02 00:00:00
redhat
redhat
(RHSA-2009:0337) Moderate: php security update
2009-04-06 00:00:00
(RHSA-2009:0338) Moderate: php security update
2009-04-06 00:00:00
(RHSA-2009:0350) Moderate: php security update
2009-04-14 00:00:00
centos
centos
php security update
2009-04-06 17:44:07
php security update
2009-04-07 12:21:16
oraclelinux
oraclelinux
php security update
2009-04-06 00:00:00
php security update
2009-04-06 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: maniadrive-1.2-13.fc10
2009-05-30 02:34:40
[SECURITY] Fedora 9 Update: maniadrive-1.2-13.fc9
2009-05-30 02:38:47
[SECURITY] Fedora 10 Update: php-5.2.9-2.fc10
2009-05-30 02:34:40
gentoo
gentoo
PHP: Multiple vulnerabilities
2010-01-05 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.015 Low
EPSS
Percentile
86.7%
Related for UB:CVE-2008-5498