CVE

Id
44774  
CVE No.
CVE-2010-2190  
Status
Candidate  
Description
The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.  
Phase
Assigned (20100607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489082 44774 CVE-2010-2190 MISC:http://www.php-security.org/2010/05/30/mops-2010-047-php-trimltrimrtrim-interruption-information-leak-vulnerability/index.html  View
489083 44774 CVE-2010-2190 MISC:http://www.php-security.org/2010/05/30/mops-2010-048-php-substr_replace-interruption-information-leak-vulnerability/index.html  View
489084 44774 CVE-2010-2190 HP:HPSBOV02763  View
489085 44774 CVE-2010-2190 URL:http://marc.info/?l=bugtraq&m=133469208622507&w=2  View
489086 44774 CVE-2010-2190 HP:SSRT100826  View
489087 44774 CVE-2010-2190 URL:http://marc.info/?l=bugtraq&m=133469208622507&w=2  View
489088 44774 CVE-2010-2190 SUSE:SUSE-SR:2010:017  View
489089 44774 CVE-2010-2190 URL:http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html  View
489090 44774 CVE-2010-2190 SUSE:SUSE-SR:2010:018  View
489091 44774 CVE-2010-2190 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html  View
489092 44774 CVE-2010-2190 XF:php-substrreplace-info-disclosure(59220)  View

Related JVN