CVE

Id
28141  
CVE No.
CVE-2007-4784  
Status
Candidate  
Description
The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service (application crash) via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be demonstrated for code execution.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291928 28141 CVE-2007-4784 BUGTRAQ:20070904 PHP < 5.2.4 setlocale() denial of service  View
291929 28141 CVE-2007-4784 URL:http://www.securityfocus.com/archive/1/archive/1/478627/100/0/threaded  View
291930 28141 CVE-2007-4784 GENTOO:GLSA-200710-02  View
291931 28141 CVE-2007-4784 URL:http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml  View
291932 28141 CVE-2007-4784 SUSE:SUSE-SA:2008:004  View
291933 28141 CVE-2007-4784 URL:http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html  View
291934 28141 CVE-2007-4784 OSVDB:38687  View
291935 28141 CVE-2007-4784 URL:http://osvdb.org/38687  View
291936 28141 CVE-2007-4784 SECUNIA:27102  View
291937 28141 CVE-2007-4784 URL:http://secunia.com/advisories/27102  View
291938 28141 CVE-2007-4784 SECUNIA:28658  View
291939 28141 CVE-2007-4784 URL:http://secunia.com/advisories/28658  View
291940 28141 CVE-2007-4784 SREASON:3114  View
291941 28141 CVE-2007-4784 URL:http://securityreason.com/securityalert/3114  View
291942 28141 CVE-2007-4784 XF:php-setlocale-dos(36458)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53917 JVNDB-2007-002609 PIX を稼動している Cisco Adaptive Security Appliance (ASA) における重要な情報を取得される脆弱性 PIX を稼動している Cisco Adaptive Security Appliance (ASA) は、AAA が有効になっている際、"test aaa" コマンドから平文のパスワードを含む %ASA-5-111008 メッセージを作成し、リモート syslog に送信するまたはローカルロギングバッファ内に配置するため、重要な情報を取得される脆弱性が存在します。 CVE-2007-4786 28141 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002609.html  View