NVD

Id
15937  
Name
CVE-2010-4699  
Description
The iconv_mime_decode_headers function in the Iconv extension in PHP before 5.3.4 does not properly handle encodings that are unrecognized by the iconv and mbstring (aka Multibyte String) implementations, which allows remote attackers to trigger an incomplete output array, and possibly bypass spam detection or have unspecified other impact, via a crafted Subject header in an e-mail message, as demonstrated by the ks_c_5601-1987 character set.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2011-01-18  
Modified Date
2011-07-18  
Seq
2010-4699  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90319 15937 CVE-2010-4699 http://bugs.php.net/52941  View
90320 15937 CVE-2010-4699 [php-general] 20070410 Decoding from unknown charsets (inc. ks_c_5601-1987)  View
90321 15937 CVE-2010-4699 oval:org.mitre.oval:def:12393  View
90322 15937 CVE-2010-4699 http://www.php.net/ChangeLog-5.php  View
90323 15937 CVE-2010-4699 php-iconvmimedecodeheaders-sec-bypass(64963)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36972 JVNDB-2010-002752 PHP の iconv_mime_decode_headers 関数におけるスパムの検出を回避される脆弱性 PHP の Iconv 拡張モジュール内にある iconv_mime_decode_headers 関数は、iconv および mbstring の実装によって認識されないエンコーディングを適切に処理しないため、スパムの検出を回避される、または詳細不明な影響を受ける脆弱性が存在します。 CVE-2010-4699 47279 CVE-2010-4699 15937 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002752.html 2010-09-28 2011-02-18 View