NVD

Id
60695  
Name
CVE-2006-1990  
Description
Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-04-24  
Modified Date
2016-11-18  
Seq
2006-1990  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313335 60695 CVE-2006-1990 20060701-01-U  View
313336 60695 CVE-2006-1990 http://docs.info.apple.com/article.html?artnum=304829  View
313337 60695 CVE-2006-1990 APPLE-SA-2006-11-28  View
313338 60695 CVE-2006-1990 oval:org.mitre.oval:def:9696  View
313339 60695 CVE-2006-1990 RHSA-2006:0549  View
313340 60695 CVE-2006-1990 GLSA-200605-08  View
313341 60695 CVE-2006-1990 1015979  View
313342 60695 CVE-2006-1990 http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm  View
313343 60695 CVE-2006-1990 http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm  View
313344 60695 CVE-2006-1990 http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02  View
313345 60695 CVE-2006-1990 MDKSA-2006:122  View
313346 60695 CVE-2006-1990 SUSE-SA:2006:031  View
313347 60695 CVE-2006-1990 RHSA-2006:0501  View
313348 60695 CVE-2006-1990 RHSA-2006:0568  View
313349 60695 CVE-2006-1990 20061005 rPSA-2006-0182-1 php php-mysql php-pgsql  View
313350 60695 CVE-2006-1990 TLSA-2006-38  View
313351 60695 CVE-2006-1990 USN-320-1  View
313352 60695 CVE-2006-1990 TA06-333A  View
313353 60695 CVE-2006-1990 ADV-2006-1500  View
313354 60695 CVE-2006-1990 ADV-2006-4750  View
313355 60695 CVE-2006-1990 php-wordwrap-string-bo(26001)  View
313356 60695 CVE-2006-1990 https://issues.rpath.com/browse/RPL-683  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58042 JVNDB-2006-000238 PHP の wordwrap() 関数における任意のコードを実行される脆弱性 ------------ CVE-2006-1990 18092 CVE-2006-1990 60695 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000238.html 2006-04-24 2007-04-01 View