NVD

Id
13678  
Name
CVE-2010-2191  
Description
The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack functions; the (5) ZEND_FETCH_RW, (6) ZEND_CONCAT, and (7) ZEND_ASSIGN_CONCAT opcodes; and the (8) ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler. NOTE: vectors 2 through 4 are related to the call time pass by reference feature.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-07  
Modified Date
2016-08-22  
Seq
2010-2191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
75963 13678 CVE-2010-2191 SUSE-SR:2010:017  View
75964 13678 CVE-2010-2191 SUSE-SR:2010:018  View
75965 13678 CVE-2010-2191 SSRT100826  View
75966 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-049-php-parse_str-interruption-memory-corruption-vulnerability/index.html  View
75967 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-050-php-preg_match-interruption-information-leak-vulnerability/index.html  View
75968 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-051-php-unpack-interruption-information-leak-vulnerability/index.html  View
75969 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-052-php-pack-interruption-information-leak-vulnerability/index.html  View
75970 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-053-php-zend_fetch_rw-opcode-interruption-information-leak-vulnerability/index.html  View
75971 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-054-php-zend_concatzend_assign_concat-opcode-interruption-information-leak-and-memory-corruption-vulnerability/index.html  View
75972 13678 CVE-2010-2191 http://www.php-security.org/2010/05/31/mops-2010-055-php-arrayobjectuasort-interruption-memory-corruption-vulnerability/index.html  View
75973 13678 CVE-2010-2191 php-parsestr-info-disclosure(59221)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36052 JVNDB-2010-001832 PHP における重要な情報を取得される脆弱性 PHP の parse_str、preg_match、unpack、pack 関数、ZEND_FETCH_RW、ZEND_CONCAT、ZEND_ASSIGN_CONCAT opcode および ArrayObject::uasort メソッドには、重要な情報を取得される、または internal 関数やハンドラのユーザ空間の割り込み処理により、メモリ破壊を誘発する脆弱性が存在します。 CVE-2010-2191 44771 CVE-2010-2191 13678 6.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001832.html 2010-05-31 2010-08-17 View