CVE-2010-3717

Published: Oct 25, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710.

Affected (26)

Products: Typo3: Typo3

Typo3

1 product

Typo3

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Typo3 Typo3	Version 4.2.0
Typo3 Typo3	Version 4.2.10
Typo3 Typo3	Version 4.2.11
Typo3 Typo3	Version 4.2.12
Typo3 Typo3	Version 4.2.13
Typo3 Typo3	Version 4.2.14
Typo3 Typo3	Version 4.2.1
Typo3 Typo3	Version 4.2.2
Typo3 Typo3	Version 4.2.3
Typo3 Typo3	Version 4.2.4
Typo3 Typo3	Version 4.2.5
Typo3 Typo3	Version 4.2.6
Typo3 Typo3	Version 4.2.7
Typo3 Typo3	Version 4.2.8
Typo3 Typo3	Version 4.2.9
Typo3 Typo3	Version 4.3.0
Typo3 Typo3	Version 4.3.1
Typo3 Typo3	Version 4.3.2
Typo3 Typo3	Version 4.3.3
Typo3 Typo3	Version 4.3.4
Typo3 Typo3	Version 4.3.5
Typo3 Typo3	Version 4.3.6
Typo3 Typo3	Version 4.4.1
Typo3 Typo3	Version 4.4.2
Typo3 Typo3	Version 4.4.3
Typo3 Typo3	Version 4.4