CVE
- Id
- 31501
- CVE No.
- CVE-2008-1384
- Status
- Candidate
- Description
- Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).
- Phase
- Assigned (20080318)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
| Id | CVE Id | CVE No. | Reference | Actions |
|---|---|---|---|---|
| 337937 | 31501 | CVE-2008-1384 | SREASONRES:20080320 PHP 5.2.5 and prior : *printf() functions Integer Overflow | View |
| 337938 | 31501 | CVE-2008-1384 | URL:http://securityreason.com/achievement_securityalert/52 | View |
| 337939 | 31501 | CVE-2008-1384 | BUGTRAQ:20080321 {securityreason.com}PHP 5 *printf() - Integer Overflow | View |
| 337940 | 31501 | CVE-2008-1384 | URL:http://www.securityfocus.com/archive/1/archive/1/489962/100/0/threaded | View |
| 337941 | 31501 | CVE-2008-1384 | BUGTRAQ:20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl | View |
| 337942 | 31501 | CVE-2008-1384 | URL:http://www.securityfocus.com/archive/1/archive/1/492535/100/0/threaded | View |
| 337943 | 31501 | CVE-2008-1384 | BUGTRAQ:20080527 rPSA-2008-0178-1 php php-mysql php-pgsql | View |
| 337944 | 31501 | CVE-2008-1384 | URL:http://www.securityfocus.com/archive/1/archive/1/492671/100/0/threaded | View |
| 337945 | 31501 | CVE-2008-1384 | CONFIRM:http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2027.2.547.2.1120&view=markup | View |
| 337946 | 31501 | CVE-2008-1384 | CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 | View |
| 337947 | 31501 | CVE-2008-1384 | CONFIRM:https://issues.rpath.com/browse/RPL-2503 | View |
| 337948 | 31501 | CVE-2008-1384 | CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178 | View |
| 337949 | 31501 | CVE-2008-1384 | DEBIAN:DSA-1572 | View |
| 337950 | 31501 | CVE-2008-1384 | URL:http://www.debian.org/security/2008/dsa-1572 | View |
| 337951 | 31501 | CVE-2008-1384 | GENTOO:GLSA-200811-05 | View |
| 337952 | 31501 | CVE-2008-1384 | URL:http://security.gentoo.org/glsa/glsa-200811-05.xml | View |
| 337953 | 31501 | CVE-2008-1384 | MANDRIVA:MDVSA-2009:022 | View |
| 337954 | 31501 | CVE-2008-1384 | URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 | View |
| 337955 | 31501 | CVE-2008-1384 | MANDRIVA:MDVSA-2009:023 | View |
| 337956 | 31501 | CVE-2008-1384 | URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 | View |
| 337957 | 31501 | CVE-2008-1384 | SUSE:SUSE-SR:2008:014 | View |
| 337958 | 31501 | CVE-2008-1384 | URL:http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html | View |
| 337959 | 31501 | CVE-2008-1384 | UBUNTU:USN-628-1 | View |
| 337960 | 31501 | CVE-2008-1384 | URL:http://www.ubuntu.com/usn/usn-628-1 | View |
| 337961 | 31501 | CVE-2008-1384 | BID:28392 | View |
| 337962 | 31501 | CVE-2008-1384 | URL:http://www.securityfocus.com/bid/28392 | View |
| 337963 | 31501 | CVE-2008-1384 | SECUNIA:30345 | View |
| 337964 | 31501 | CVE-2008-1384 | URL:http://secunia.com/advisories/30345 | View |
| 337965 | 31501 | CVE-2008-1384 | SECUNIA:30411 | View |
| 337966 | 31501 | CVE-2008-1384 | URL:http://secunia.com/advisories/30411 | View |
| 337967 | 31501 | CVE-2008-1384 | SECUNIA:30967 | View |
| 337968 | 31501 | CVE-2008-1384 | URL:http://secunia.com/advisories/30967 | View |
| 337969 | 31501 | CVE-2008-1384 | SECUNIA:31200 | View |
| 337970 | 31501 | CVE-2008-1384 | URL:http://secunia.com/advisories/31200 | View |
| 337971 | 31501 | CVE-2008-1384 | SECUNIA:30158 | View |
| 337972 | 31501 | CVE-2008-1384 | URL:http://secunia.com/advisories/30158 | View |
| 337973 | 31501 | CVE-2008-1384 | SECUNIA:32746 | View |
| 337974 | 31501 | CVE-2008-1384 | URL:http://secunia.com/advisories/32746 | View |
| 337975 | 31501 | CVE-2008-1384 | XF:php-phpsprintfappendstring-overflow(41386) | View |