NVD

Id
15441  
Name
CVE-2010-4156  
Description
The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-11-09  
Modified Date
2011-05-03  
Seq
2010-4156  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87058 15441 CVE-2010-4156 FEDORA-2010-19011  View
87059 15441 CVE-2010-4156 FEDORA-2010-18976  View
87060 15441 CVE-2010-4156 SSRT100409  View
87061 15441 CVE-2010-4156 http://pastie.org/1279428  View
87062 15441 CVE-2010-4156 http://pastie.org/1279682  View
87063 15441 CVE-2010-4156 MDVSA-2010:225  View
87064 15441 CVE-2010-4156 [oss-security] 20101107 CVE Request: PHP 5.3.3, libmbfl, mb_strcut  View
87065 15441 CVE-2010-4156 [oss-security] 20101108 Re: CVE Request: PHP 5.3.3, libmbfl, mb_strcut  View
87066 15441 CVE-2010-4156 http://www.php.net/ChangeLog-5.php  View
87067 15441 CVE-2010-4156 RHSA-2011:0196  View
87068 15441 CVE-2010-4156 44727  View
87069 15441 CVE-2010-4156 USN-1042-1  View
87070 15441 CVE-2010-4156 ADV-2011-0020  View
87071 15441 CVE-2010-4156 ADV-2011-0021  View
87072 15441 CVE-2010-4156 ADV-2011-0077  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36833 JVNDB-2010-002613 Libmbfl の mb_strcut 関数における重要な情報を取得される脆弱性 PHP などの製品で利用される Libmbfl の mb_strcut 関数には、length パラメータの処理に関して不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2010-4156 46736 CVE-2010-4156 15441 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002613.html 2010-11-10 2011-02-18 View