Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4698
HistoryJan 18, 2011 - 12:00 a.m.

CVE-2010-4698

2011-01-1800:00:00
ubuntu.com
ubuntu.com
16

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.6%

Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and
5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of
service (application crash) via a large number of anti-aliasing steps in an
argument to the imagepstext function.

Bugs

Notes

Author Note
sbeattie natty needs regression patch applied (commit 306236)
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchphp5< 5.2.4-2ubuntu5.15UNKNOWN
ubuntu9.10noarchphp5< 5.2.10.dfsg.1-2ubuntu6.9UNKNOWN
ubuntu10.04noarchphp5< 5.3.2-1ubuntu4.8UNKNOWN
ubuntu10.10noarchphp5< 5.3.3-1ubuntu9.4UNKNOWN
ubuntu11.04noarchphp5< 5.3.5-1ubuntu7.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.6%