NVD

Id
1342  
Name
CVE-2008-1384  
Description
Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-03-27  
Modified Date
2012-10-30  
Seq
2008-1384  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8610 1342 CVE-2008-1384 http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2027.2.547.2.1120&view=markup  View
8611 1342 CVE-2008-1384 SUSE-SR:2008:014  View
8612 1342 CVE-2008-1384 GLSA-200811-05  View
8613 1342 CVE-2008-1384 20080320 PHP 5.2.5 and prior : *printf() functions Integer Overflow  View
8614 1342 CVE-2008-1384 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176  View
8615 1342 CVE-2008-1384 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178  View
8616 1342 CVE-2008-1384 DSA-1572  View
8617 1342 CVE-2008-1384 MDVSA-2009:022  View
8618 1342 CVE-2008-1384 MDVSA-2009:023  View
8619 1342 CVE-2008-1384 20080321 {securityreason.com}PHP 5 *printf() - Integer Overflow  View
8620 1342 CVE-2008-1384 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
8621 1342 CVE-2008-1384 20080527 rPSA-2008-0178-1 php php-mysql php-pgsql  View
8622 1342 CVE-2008-1384 28392  View
8623 1342 CVE-2008-1384 USN-628-1  View
8624 1342 CVE-2008-1384 php-phpsprintfappendstring-overflow(41386)  View
8625 1342 CVE-2008-1384 https://issues.rpath.com/browse/RPL-2503  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48935 JVNDB-2008-004245 PHP における整数オーバーフローの脆弱性 PHP は、formatted_print.c 内の php_sprintf_appendstring 関数などのフォーマットされた文字列用の関数に関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2008-1384 31497 CVE-2008-1384 1342 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004245.html 2008-03-27 2012-09-25 View