NVD

Id
15892  
Name
CVE-2010-4645  
Description
strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2011-01-10  
Modified Date
2016-08-22  
Seq
2010-4645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90047 15892 CVE-2010-4645 http://bugs.php.net/53632  View
90048 15892 CVE-2010-4645 http://hal.archives-ouvertes.fr/docs/00/28/14/29/PDF/floating-point-article.pdf  View
90049 15892 CVE-2010-4645 APPLE-SA-2011-10-12-3  View
90050 15892 CVE-2010-4645 FEDORA-2011-0329  View
90051 15892 CVE-2010-4645 FEDORA-2011-0321  View
90052 15892 CVE-2010-4645 HPSBMU02752  View
90053 15892 CVE-2010-4645 SSRT100826  View
90054 15892 CVE-2010-4645 SSA:2011-010-01  View
90055 15892 CVE-2010-4645 http://support.apple.com/kb/HT5002  View
90056 15892 CVE-2010-4645 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/Zend/zend_strtod.c?r1=266327&r2=307095&pathrev=307095  View
90057 15892 CVE-2010-4645 http://www.exploringbinary.com/php-hangs-on-numeric-value-2-2250738585072011e-308/  View
90058 15892 CVE-2010-4645 [oss-security] 20110105 possible flaw in widely used strtod.c implementation  View
90059 15892 CVE-2010-4645 [oss-security] 20110105 Re: possible flaw in widely used strtod.c implementation  View
90060 15892 CVE-2010-4645 [oss-security] 20110106 Re: possible flaw in widely used strtod.c implementation  View
90061 15892 CVE-2010-4645 RHSA-2011:0195  View
90062 15892 CVE-2010-4645 RHSA-2011:0196  View
90063 15892 CVE-2010-4645 45668  View
90064 15892 CVE-2010-4645 USN-1042-1  View
90065 15892 CVE-2010-4645 ADV-2011-0060  View
90066 15892 CVE-2010-4645 ADV-2011-0066  View
90067 15892 CVE-2010-4645 ADV-2011-0077  View
90068 15892 CVE-2010-4645 ADV-2011-0198  View
90069 15892 CVE-2010-4645 php-zendstrtod-dos(64470)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36902 JVNDB-2010-002682 PHP の zend_strtod 関数にて使用される strtod.c におけるサービス運用妨害 (DoS) の脆弱性 PHP の zend_strtod 関数にて使用される strtod.c には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-4645 47225 CVE-2010-4645 15892 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002682.html 2010-12-30 2011-02-10 View