CVE

Id
49060  
CVE No.
CVE-2011-1148  
Status
Candidate  
Description
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.  
Phase
Assigned (20110303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
533151 49060 CVE-2011-1148 MLIST:[oss-security] 20110313 CVE request: PHP substr_replace() use-after-free  View
533152 49060 CVE-2011-1148 URL:http://openwall.com/lists/oss-security/2011/03/13/2  View
533153 49060 CVE-2011-1148 MLIST:[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free  View
533154 49060 CVE-2011-1148 URL:http://openwall.com/lists/oss-security/2011/03/13/3  View
533155 49060 CVE-2011-1148 MLIST:[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free  View
533156 49060 CVE-2011-1148 URL:http://openwall.com/lists/oss-security/2011/03/13/9  View
533157 49060 CVE-2011-1148 CONFIRM:http://bugs.php.net/bug.php?id=54238  View
533158 49060 CVE-2011-1148 CONFIRM:http://www.php.net/ChangeLog-5.php#5.3.7  View
533159 49060 CVE-2011-1148 CONFIRM:http://www.php.net/archive/2011.php#id2011-08-18-1  View
533160 49060 CVE-2011-1148 CONFIRM:http://support.apple.com/kb/HT5130  View
533161 49060 CVE-2011-1148 APPLE:APPLE-SA-2012-02-01-1  View
533162 49060 CVE-2011-1148 URL:http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html  View
533163 49060 CVE-2011-1148 HP:HPSBOV02763  View
533164 49060 CVE-2011-1148 URL:http://marc.info/?l=bugtraq&m=133469208622507&w=2  View
533165 49060 CVE-2011-1148 HP:SSRT100826  View
533166 49060 CVE-2011-1148 URL:http://marc.info/?l=bugtraq&m=133469208622507&w=2  View
533167 49060 CVE-2011-1148 MANDRIVA:MDVSA-2011:165  View
533168 49060 CVE-2011-1148 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:165  View
533169 49060 CVE-2011-1148 REDHAT:RHSA-2011:1423  View
533170 49060 CVE-2011-1148 URL:http://www.redhat.com/support/errata/RHSA-2011-1423.html  View
533171 49060 CVE-2011-1148 BID:46843  View
533172 49060 CVE-2011-1148 URL:http://www.securityfocus.com/bid/46843  View
533173 49060 CVE-2011-1148 BID:49241  View
533174 49060 CVE-2011-1148 URL:http://www.securityfocus.com/bid/49241  View
533175 49060 CVE-2011-1148 XF:php-substrreplace-code-exec(66080)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31148 JVNDB-2011-001387 PHP の phar_object.c における重要な情報を取得される脆弱性 PHP の phar モジュール内にある phar_object.c には、フォーマット文字列の処理に関して不備があるため、重要な情報を取得される、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行されるなどの脆弱性が存在します。 CVE-2011-1153 49060 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001387.html  View