Lucene search
Ubuntu.comUB:CVE-2008-5498HistoryDec 26, 2008 - 12:00 a.m.
CVE-2008-5498
2008-12-2600:00:00
ubuntu.com
ubuntu.com
18
php 5.2.8
imagerotate function
array index error
memory locations
indexed image
ubuntu
libgd2
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.015
Percentile
86.9%
Array index error in the imageRotate function in PHP 5.2.8 and earlier
allows context-dependent attackers to read the contents of arbitrary memory
locations via a crafted value of the third argument (aka the bgd_color or
clrBack argument) for an indexed image.
Notes
| Author | Note |
|---|---|
| jdstrand | php5 on Ubuntu is linked against libgd2, which is not affected |
Related
openvas
openvas
Slackware: Security Advisory (SSA:2009-098-02)
2012-09-10 00:00:00
Slackware Advisory SSA:2009-098-02 php
2012-09-11 00:00:00
PHP 'imageRotate()' Memory Information Disclosure Vulnerability
2008-12-31 00:00:00
exploitpack
exploitpack
PHP 5.2.8 gd library - imageRotate() Information Leak
2009-01-02 00:00:00
nessus
nessus
FreeBSD : php5-gd -- uninitialized memory information disclosure vulnerability (58a3c266-db01-11dd-ae30-001cc0377035)
2009-02-04 00:00:00
Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : php (SSA:2009-098-02)
2009-04-08 00:00:00
PHP 5.x < 5.2.9 Multiple Vulnerabilities
2009-03-02 00:00:00
seebug
seebug
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
2009-01-03 00:00:00
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
2014-07-01 00:00:00
PHP imageRotate()ćŞĺĺ§ĺĺ
ĺ俥ćŻćłé˛ćźć´
2008-12-30 00:00:00
zdt
zdt
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
2009-01-02 00:00:00
exploitdb
exploitdb
PHP 5.2.8 gd library - 'imageRotate()' Information Leak
2009-01-02 00:00:00
freebsd
freebsd
php5-gd -- uninitialized memory information disclosure vulnerability
2008-12-24 00:00:00
prion
prion
Memory corruption
2008-12-26 20:30:00
cvelist
cvelist
CVE-2008-5498
2008-12-26 20:00:00
nvd
nvd
CVE-2008-5498
2008-12-26 20:30:00
debiancve
debiancve
CVE-2008-5498
2008-12-26 20:30:00
slackware
slackware
php
2009-04-07 23:29:51
veracode
veracode
Information Disclosure
2020-04-10 00:31:23
cve
cve
CVE-2008-5498
2008-12-26 20:30:00
redhat
redhat
(RHSA-2009:0337) Moderate: php security update
2009-04-06 00:00:00
(RHSA-2009:0338) Moderate: php security update
2009-04-06 00:00:00
(RHSA-2009:0350) Moderate: php security update
2009-04-14 00:00:00
centos
centos
php security update
2009-04-06 17:44:07
php security update
2009-04-07 12:21:16
osv
osv
Red Hat Security Advisory: php security update
2024-09-15 17:46:54
Red Hat Security Advisory: php security update
2024-09-15 17:46:59
Red Hat Security Advisory: php security update
2024-09-15 17:47:04
oraclelinux
oraclelinux
php security update
2009-04-06 00:00:00
php security update
2009-04-06 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: maniadrive-1.2-13.fc9
2009-05-30 02:38:47
[SECURITY] Fedora 10 Update: maniadrive-1.2-13.fc10
2009-05-30 02:34:40
[SECURITY] Fedora 9 Update: php-5.2.9-2.fc9
2009-05-30 02:38:47
gentoo
gentoo
PHP: Multiple vulnerabilities
2010-01-05 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.015
Percentile
86.9%
Related for UB:CVE-2008-5498