CVE-2008-5498

Published: Dec 26, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Affected (33)

Products: Php: Php

1 product

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.2.8
Php Php	Version 5.0.0
Php Php	Version 5.0.0 beta1
Php Php	Version 5.0.0 beta2
Php Php	Version 5.0.0 beta3
Php Php	Version 5.0.0 beta4
Php Php	Version 5.0.0 rc1
Php Php	Version 5.0.0 rc2
Php Php	Version 5.0.0 rc3
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.0 rc1
Php Php	Version 5.0 rc2
Php Php	Version 5.0 rc3
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.7
Php Php	Version 5

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (48)

http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u

Source: cve@mitre.org

http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php

Source: cve@mitre.org

Exploit

http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php

Source: cve@mitre.org

Exploit

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=124654546101607&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=125631037611762&w=2

Source: cve@mitre.org

http://osvdb.org/51031

Source: cve@mitre.org

http://secunia.com/advisories/34642

Source: cve@mitre.org

http://secunia.com/advisories/35306

Source: cve@mitre.org

http://secunia.com/advisories/35650

Source: cve@mitre.org

http://secunia.com/advisories/36701

Source: cve@mitre.org

http://securitytracker.com/id?1021494

Source: cve@mitre.org

http://support.apple.com/kb/HT3865

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:021

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:022

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:023

Source: cve@mitre.org

http://www.php.net/releases/5_2_9.php

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0350.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/33002

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47635

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html

Source: cve@mitre.org

http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1360&r2=1.2027.2.547.2.1361&diff_format=u

Source: af854a3a-2127-422b-91ae-364da2661108

http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=124654546101607&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=125631037611762&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/51031

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34642

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35306

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35650

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36701

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1021494

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3865

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:021

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:022

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:023

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_2_9.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0350.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33002

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47635

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.