NVD

Id
13584  
Name
CVE-2010-2097  
Description
The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-05-27  
Modified Date
2016-08-22  
Seq
2010-2097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74982 13584 CVE-2010-2097 SUSE-SR:2010:017  View
74983 13584 CVE-2010-2097 SUSE-SR:2010:018  View
74984 13584 CVE-2010-2097 SSRT100826  View
74985 13584 CVE-2010-2097 http://php-security.org/2010/05/18/mops-2010-032-php-iconv_mime_decode-interruption-information-leak-vulnerability/index.html  View
74986 13584 CVE-2010-2097 http://php-security.org/2010/05/18/mops-2010-033-php-iconv_substr-interruption-information-leak-vulnerability/index.html  View
74987 13584 CVE-2010-2097 http://php-security.org/2010/05/18/mops-2010-034-php-iconv_mime_encode-interruption-information-leak-vulnerability/index.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39054 JVNDB-2010-004839 PHP の iconv_mime_decode における重要な情報を取得される脆弱性 PHP の (1) iconv_mime_decode、(2) iconv_substr、(3) iconv_mime_encode 機能は、関数呼び出し時のリファレンス渡し機能に関する処理に不備があるため、重要な情報 (メモリの内容) を取得される脆弱性が存在します。 CVE-2010-2097 44677 CVE-2010-2097 13584 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004839.html 2010-05-18 2012-09-25 View