NVD

Id
13407  
Name
CVE-2010-1915  
Description
The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose values are not updated in the associated local variables, and access of previously-freed memory.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-05-12  
Modified Date
2010-12-07  
Seq
2010-1915  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74185 13407 CVE-2010-1915 SUSE-SR:2010:017  View
74186 13407 CVE-2010-1915 SUSE-SR:2010:018  View
74187 13407 CVE-2010-1915 http://www.php-security.org/2010/05/09/mops-2010-017-php-preg_quote-interruption-information-leak-vulnerability/index.html  View
74188 13407 CVE-2010-1915 php-pregquote-information-disclosure(58586)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38981 JVNDB-2010-004766 PHP の preg_quote 関数における重要な情報を取得される脆弱性 PHP の preg_quote 関数は、関数呼び出し時のリファレンス渡し機能に関連するローカル変数内で更新されない ZVALs の変更、および事前に解放されたメモリのアクセスに関する処理に不備があるため、重要な情報 (メモリの内容) を取得される脆弱性が存在します。 CVE-2010-1915 44495 CVE-2010-1915 13407 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004766.html 2010-05-09 2012-09-25 View