NVD

Id
45045  
Name
CVE-2012-3450  
Description
pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-08-06  
Modified Date
2013-04-18  
Seq
2012-3450  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225846 45045 CVE-2012-3450 SUSE-SU-2012:1033  View
225847 45045 CVE-2012-3450 20120610 [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation  View
225848 45045 CVE-2012-3450 DSA-2527  View
225849 45045 CVE-2012-3450 MDVSA-2012:108  View
225850 45045 CVE-2012-3450 [oss-security] 20120802 CVE Request: php5 pdo array overread/crash  View
225851 45045 CVE-2012-3450 [oss-security] 20120802 Re: CVE Request: php5 pdo array overread/crash  View
225852 45045 CVE-2012-3450 http://www.php.net/ChangeLog-5.php  View
225853 45045 CVE-2012-3450 USN-1569-1  View
225854 45045 CVE-2012-3450 https://bugs.php.net/bug.php?id=61755  View
225855 45045 CVE-2012-3450 https://bugzilla.novell.com/show_bug.cgi?id=769785  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27770 JVNDB-2012-003477 PHP の PDO 拡張におけるサービス運用妨害 (DoS) の脆弱性 PHP の PDO 拡張内の pdo_sql_parser.re は、プリペアドステートメントの解析中、クエリ文字列の終わりを適切に確定しないため、サービス運用妨害 (領域外のメモリー参照およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-3450 56688 CVE-2012-3450 45045 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003477.html 2012-06-06 2012-10-22 View