NVD

Id
10669  
Name
CVE-2011-4153  
Description
PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that performs strndup operations on untrusted string data, as demonstrated by the define function in zend_builtin_functions.c, and unspecified functions in ext/soap/php_sdl.c, ext/standard/syslog.c, ext/standard/browscap.c, ext/oci8/oci8.c, ext/com_dotnet/com_typeinfo.c, and main/php_open_temporary_file.c.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2012-01-18  
Modified Date
2012-07-21  
Seq
2011-4153  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60289 10669 CVE-2011-4153 20120114 PHP 5.3.8 Multiple vulnerabilities  View
60290 10669 CVE-2011-4153 http://cxsecurity.com/research/103  View
60291 10669 CVE-2011-4153 SSRT100877  View
60292 10669 CVE-2011-4153 openSUSE-SU-2012:0426  View
60293 10669 CVE-2011-4153 SSRT100856  View
60294 10669 CVE-2011-4153 18370  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25367 JVNDB-2012-001074 PHP におけるサービス運用妨害 (DoS) の脆弱性 PHP は、常に zend_strndup 関数の戻り値をチェックしないため、サービス運用妨害 (Null ポインタデリファレンスおよびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-4153 52060 CVE-2011-4153 10669 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001074.html 2012-01-18 2012-01-19 View