CVE-2010-4150

Published: Dec 7, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

Affected (14)

Products: Php: Php

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.2.0
Php Php	Version 5.2.10
Php Php	Version 5.2.11
Php Php	Version 5.2.12
Php Php	Version 5.2.13
Php Php	Version 5.2.14
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.3.0
Php Php	Version 5.3.1
Php Php	Version 5.3.2
Php Php	Version 5.3.3

Related CWEs

References (44)

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=133469208622507&w=2

Source: cve@mitre.org

http://secunia.com/advisories/42729

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619

Source: cve@mitre.org

http://support.apple.com/kb/HT4581

Source: cve@mitre.org

http://svn.php.net/viewvc?view=revision&revision=305032

Source: cve@mitre.org

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2010:239

Source: cve@mitre.org

http://www.php.net/ChangeLog-5.php

Source: cve@mitre.org

http://www.php.net/archive/2010.php#id2010-12-10-1

Source: cve@mitre.org

http://www.php.net/releases/5_2_15.php

Source: cve@mitre.org

http://www.php.net/releases/5_3_4.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/44980

Source: cve@mitre.org

http://www.securitytracker.com/id?1024761

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/3027

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3313

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0020

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0021

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=656917

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/63390

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12489

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=133469208622507&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42729

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT4581

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.php.net/viewvc?view=revision&revision=305032

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2010:239

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/ChangeLog-5.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/archive/2010.php#id2010-12-10-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_2_15.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_3_4.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/44980

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1024761

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/3027

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2010/3313

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0020

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0021

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=656917

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/63390

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12489

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.