CVE-2010-3710

Published: Oct 25, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Affected (19)

Products: Php: Php

1 product

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.2.0
Php Php	Version 5.2.10
Php Php	Version 5.2.11
Php Php	Version 5.2.12
Php Php	Version 5.2.13
Php Php	Version 5.2.14
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.7
Php Php	Version 5.2.8
Php Php	Version 5.2.9
Php Php	Version 5.3.0
Php Php	Version 5.3.1
Php Php	Version 5.3.2
Php Php	Version 5.3.3

Related CWEs

References (40)

http://bugs.php.net/bug.php?id=52929

Source: secalert@redhat.com

Exploit

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=133469208622507&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/42812

Source: secalert@redhat.com

http://secunia.com/advisories/43189

Source: secalert@redhat.com

http://support.apple.com/kb/HT4581

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:218

Source: secalert@redhat.com

http://www.php.net/ChangeLog-5.php

Source: secalert@redhat.com

http://www.php.net/archive/2010.php#id2010-12-10-1

Source: secalert@redhat.com

http://www.php.net/releases/5_2_15.php

Source: secalert@redhat.com

http://www.php.net/releases/5_3_4.php

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-0196.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/43926

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1042-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0020

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0021

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0077

Source: secalert@redhat.com

http://bugs.php.net/bug.php?id=52929

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=133469208622507&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42812

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43189

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT4581

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:218

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/ChangeLog-5.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/archive/2010.php#id2010-12-10-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_2_15.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_3_4.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-0196.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/43926

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1042-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0020

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0021

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0077

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.