CVE

Id
33775  
CVE No.
CVE-2008-3658  
Status
Candidate  
Description
Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.  
Phase
Assigned (20080812)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368226 33775 CVE-2008-3658 BUGTRAQ:20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
368227 33775 CVE-2008-3658 URL:http://www.securityfocus.com/archive/1/archive/1/501376/100/0/threaded  View
368228 33775 CVE-2008-3658 MISC:http://news.php.net/php.cvs/51219  View
368229 33775 CVE-2008-3658 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=234102  View
368230 33775 CVE-2008-3658 CONFIRM:http://www.php.net/archive/2008.php#id2008-08-07-1  View
368231 33775 CVE-2008-3658 MLIST:[oss-security] 20080808 CVE request: php-5.2.6 overflow issues  View
368232 33775 CVE-2008-3658 URL:http://www.openwall.com/lists/oss-security/2008/08/08/2  View
368233 33775 CVE-2008-3658 MLIST:[oss-security] 20080813 Re: CVE request: php-5.2.6 overflow issues  View
368234 33775 CVE-2008-3658 URL:http://www.openwall.com/lists/oss-security/2008/08/13/8  View
368235 33775 CVE-2008-3658 CONFIRM:http://wiki.rpath.com/Advisories:rPSA-2009-0035  View
368236 33775 CVE-2008-3658 CONFIRM:http://support.apple.com/kb/HT3549  View
368237 33775 CVE-2008-3658 APPLE:APPLE-SA-2009-05-12  View
368238 33775 CVE-2008-3658 URL:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html  View
368239 33775 CVE-2008-3658 DEBIAN:DSA-1647  View
368240 33775 CVE-2008-3658 URL:http://www.debian.org/security/2008/dsa-1647  View
368241 33775 CVE-2008-3658 FEDORA:FEDORA-2009-3768  View
368242 33775 CVE-2008-3658 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html  View
368243 33775 CVE-2008-3658 FEDORA:FEDORA-2009-3848  View
368244 33775 CVE-2008-3658 URL:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html  View
368245 33775 CVE-2008-3658 GENTOO:GLSA-200811-05  View
368246 33775 CVE-2008-3658 URL:http://security.gentoo.org/glsa/glsa-200811-05.xml  View
368247 33775 CVE-2008-3658 HP:HPSBTU02382  View
368248 33775 CVE-2008-3658 URL:http://www.securityfocus.com/archive/1/archive/1/498647/100/0/threaded  View
368249 33775 CVE-2008-3658 HP:SSRT080132  View
368250 33775 CVE-2008-3658 URL:http://www.securityfocus.com/archive/1/archive/1/498647/100/0/threaded  View
368251 33775 CVE-2008-3658 HP:HPSBUX02401  View
368252 33775 CVE-2008-3658 URL:http://marc.info/?l=bugtraq&m=123376588623823&w=2  View
368253 33775 CVE-2008-3658 HP:SSRT090005  View
368254 33775 CVE-2008-3658 URL:http://marc.info/?l=bugtraq&m=123376588623823&w=2  View
368255 33775 CVE-2008-3658 HP:HPSBUX02465  View
368256 33775 CVE-2008-3658 URL:http://marc.info/?l=bugtraq&m=125631037611762&w=2  View
368257 33775 CVE-2008-3658 HP:SSRT090192  View
368258 33775 CVE-2008-3658 URL:http://marc.info/?l=bugtraq&m=125631037611762&w=2  View
368259 33775 CVE-2008-3658 MANDRIVA:MDVSA-2009:021  View
368260 33775 CVE-2008-3658 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:021  View
368261 33775 CVE-2008-3658 MANDRIVA:MDVSA-2009:022  View
368262 33775 CVE-2008-3658 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:022  View
368263 33775 CVE-2008-3658 MANDRIVA:MDVSA-2009:023  View
368264 33775 CVE-2008-3658 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:023  View
368265 33775 CVE-2008-3658 MANDRIVA:MDVSA-2009:024  View
368266 33775 CVE-2008-3658 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:024  View
368267 33775 CVE-2008-3658 REDHAT:RHSA-2009:0350  View
368268 33775 CVE-2008-3658 URL:http://www.redhat.com/support/errata/RHSA-2009-0350.html  View
368269 33775 CVE-2008-3658 SUSE:SUSE-SR:2008:018  View
368270 33775 CVE-2008-3658 URL:http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html  View
368271 33775 CVE-2008-3658 SUSE:SUSE-SR:2008:021  View
368272 33775 CVE-2008-3658 URL:http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html  View
368273 33775 CVE-2008-3658 CERT:TA09-133A  View
368274 33775 CVE-2008-3658 URL:http://www.us-cert.gov/cas/techalerts/TA09-133A.html  View
368275 33775 CVE-2008-3658 BID:30649  View
368276 33775 CVE-2008-3658 URL:http://www.securityfocus.com/bid/30649  View
368277 33775 CVE-2008-3658 OSVDB:47484  View
368278 33775 CVE-2008-3658 URL:http://osvdb.org/47484  View
368279 33775 CVE-2008-3658 OVAL:oval:org.mitre.oval:def:9724  View
368280 33775 CVE-2008-3658 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9724  View
368281 33775 CVE-2008-3658 SECUNIA:35074  View
368282 33775 CVE-2008-3658 URL:http://secunia.com/advisories/35074  View
368283 33775 CVE-2008-3658 SECUNIA:35306  View
368284 33775 CVE-2008-3658 URL:http://secunia.com/advisories/35306  View
368285 33775 CVE-2008-3658 SECUNIA:32746  View
368286 33775 CVE-2008-3658 URL:http://secunia.com/advisories/32746  View
368287 33775 CVE-2008-3658 VUPEN:ADV-2008-3275  View
368288 33775 CVE-2008-3658 URL:http://www.vupen.com/english/advisories/2008/3275  View
368289 33775 CVE-2008-3658 VUPEN:ADV-2009-0320  View
368290 33775 CVE-2008-3658 URL:http://www.vupen.com/english/advisories/2009/0320  View
368291 33775 CVE-2008-3658 SECUNIA:32148  View
368292 33775 CVE-2008-3658 URL:http://secunia.com/advisories/32148  View
368293 33775 CVE-2008-3658 SECUNIA:32316  View
368294 33775 CVE-2008-3658 URL:http://secunia.com/advisories/32316  View
368295 33775 CVE-2008-3658 SECUNIA:32884  View
368296 33775 CVE-2008-3658 URL:http://secunia.com/advisories/32884  View
368297 33775 CVE-2008-3658 SECUNIA:31982  View
368298 33775 CVE-2008-3658 URL:http://secunia.com/advisories/31982  View
368299 33775 CVE-2008-3658 SECUNIA:33797  View
368300 33775 CVE-2008-3658 URL:http://secunia.com/advisories/33797  View
368301 33775 CVE-2008-3658 VUPEN:ADV-2008-2336  View
368302 33775 CVE-2008-3658 URL:http://www.vupen.com/english/advisories/2008/2336  View
368303 33775 CVE-2008-3658 VUPEN:ADV-2009-1297  View
368304 33775 CVE-2008-3658 URL:http://www.vupen.com/english/advisories/2009/1297  View
368305 33775 CVE-2008-3658 XF:php-imageloadfont-dos(44401)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48046 JVNDB-2008-003356 Gallery におけるクッキーをキャプチャされる脆弱性 Gallery は、https セッション内のセッションクッキーにセキュアフラグを設定しないため、https リクエスト内にクッキーを送信される、およびこのクッキーをキャプチャされる脆弱性が存在します。 CVE-2008-3662 33775 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003356.html  View