NVD

Id
14381  
Name
CVE-2010-2950  
Description
Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-09-28  
Modified Date
2011-05-03  
Seq
2010-2950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79605 14381 CVE-2010-2950 APPLE-SA-2011-03-21-1  View
79606 14381 CVE-2010-2950 SUSE-SR:2010:017  View
79607 14381 CVE-2010-2950 HPSBMA02662  View
79608 14381 CVE-2010-2950 http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html  View
79609 14381 CVE-2010-2950 http://security-tracker.debian.org/tracker/CVE-2010-2950  View
79610 14381 CVE-2010-2950 http://support.apple.com/kb/HT4581  View
79611 14381 CVE-2010-2950 http://svn.php.net/viewvc?view=revision&revision=302565  View
79612 14381 CVE-2010-2950 MDVSA-2010:254  View
79613 14381 CVE-2010-2950 http://www.php.net/archive/2010.php#id2010-12-10-1  View
79614 14381 CVE-2010-2950 http://www.php.net/ChangeLog-5.php  View
79615 14381 CVE-2010-2950 http://www.php.net/releases/5_3_4.php  View
79616 14381 CVE-2010-2950 https://bugzilla.redhat.com/show_bug.cgi?id=598537  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36350 JVNDB-2010-002130 PHP の phar 拡張における重要な情報を取得される脆弱性 PHP の phar 拡張の stream.c は、phar_stream_flush 関数の処理に不備があるため、重要な情報を取得される、または任意のコードを実行される脆弱性が存在します。 CVE-2010-2950 45530 CVE-2010-2950 14381 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002130.html 2010-05-14 2011-04-01 View