fkie_cve-2006-4484
Vulnerability from fkie_nvd
Published
2006-08-31 21:04
Modified
2025-04-03 01:03
Severity ?
Summary
Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.
References
cve@mitre.orgftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
cve@mitre.orghttp://bugs.php.net/bug.php?id=38112Exploit
cve@mitre.orghttp://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11Patch
cve@mitre.orghttp://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=logPatch
cve@mitre.orghttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
cve@mitre.orghttp://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
cve@mitre.orghttp://rhn.redhat.com/errata/RHSA-2006-0688.html
cve@mitre.orghttp://secunia.com/advisories/21546Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/21768Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/21842Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/22039
cve@mitre.orghttp://secunia.com/advisories/22069
cve@mitre.orghttp://secunia.com/advisories/22225
cve@mitre.orghttp://secunia.com/advisories/22440
cve@mitre.orghttp://secunia.com/advisories/22487
cve@mitre.orghttp://secunia.com/advisories/22538
cve@mitre.orghttp://secunia.com/advisories/28768
cve@mitre.orghttp://secunia.com/advisories/28838
cve@mitre.orghttp://secunia.com/advisories/28845
cve@mitre.orghttp://secunia.com/advisories/28866
cve@mitre.orghttp://secunia.com/advisories/28959
cve@mitre.orghttp://secunia.com/advisories/29157
cve@mitre.orghttp://secunia.com/advisories/29242
cve@mitre.orghttp://secunia.com/advisories/29546
cve@mitre.orghttp://secunia.com/advisories/30717
cve@mitre.orghttp://securitytracker.com/id?1016984
cve@mitre.orghttp://support.avaya.com/elmodocs2/security/ASA-2006-222.htm
cve@mitre.orghttp://support.avaya.com/elmodocs2/security/ASA-2006-223.htm
cve@mitre.orghttp://wiki.rpath.com/Advisories:rPSA-2008-0046
cve@mitre.orghttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDKSA-2006:162
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2008:038
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2008:077
cve@mitre.orghttp://www.novell.com/linux/security/advisories/2006_52_php.html
cve@mitre.orghttp://www.novell.com/linux/security/advisories/2008_13_sr.html
cve@mitre.orghttp://www.php.net/ChangeLog-5.php#5.1.5
cve@mitre.orghttp://www.php.net/release_5_1_5.phpPatch
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2008-0146.html
cve@mitre.orghttp://www.securityfocus.com/archive/1/447866/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/archive/1/487683/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/archive/1/488008/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/19582
cve@mitre.orghttp://www.turbolinux.com/security/2006/TLSA-2006-38.txt
cve@mitre.orghttp://www.ubuntu.com/usn/usn-342-1
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/3318
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=431568
cve@mitre.orghttps://issues.rpath.com/browse/RPL-2218
cve@mitre.orghttps://issues.rpath.com/browse/RPL-683
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html
af854a3a-2127-422b-91ae-364da2661108ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
af854a3a-2127-422b-91ae-364da2661108http://bugs.php.net/bug.php?id=38112Exploit
af854a3a-2127-422b-91ae-364da2661108http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11Patch
af854a3a-2127-422b-91ae-364da2661108http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=logPatch
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2006-0688.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21546Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21768Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21842Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22039
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22069
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22225
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22440
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22487
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22538
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28768
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28838
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28845
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28866
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/28959
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29157
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29242
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29546
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/30717
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016984
af854a3a-2127-422b-91ae-364da2661108http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm
af854a3a-2127-422b-91ae-364da2661108http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm
af854a3a-2127-422b-91ae-364da2661108http://wiki.rpath.com/Advisories:rPSA-2008-0046
af854a3a-2127-422b-91ae-364da2661108http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2006:162
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2008:038
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2008:077
af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2006_52_php.html
af854a3a-2127-422b-91ae-364da2661108http://www.novell.com/linux/security/advisories/2008_13_sr.html
af854a3a-2127-422b-91ae-364da2661108http://www.php.net/ChangeLog-5.php#5.1.5
af854a3a-2127-422b-91ae-364da2661108http://www.php.net/release_5_1_5.phpPatch
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2008-0146.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/447866/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/487683/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/488008/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19582
af854a3a-2127-422b-91ae-364da2661108http://www.turbolinux.com/security/2006/TLSA-2006-38.txt
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/usn-342-1
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3318
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=431568
af854a3a-2127-422b-91ae-364da2661108https://issues.rpath.com/browse/RPL-2218
af854a3a-2127-422b-91ae-364da2661108https://issues.rpath.com/browse/RPL-683
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html
Impacted products
Vendor Product Version
php php 5.1.0
php php 5.1.1
php php 5.1.2
php php 5.1.4


To clipboard 

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "F8CDFEF9-C367-4800-8A2F-375C261FAE55",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "16E43B88-1563-4EFD-9267-AE3E8C35D67A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "11E5715F-A8BC-49EF-836B-BB78E1BC0790",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "1874F637-77E2-4C4A-BF92-AEE96A60BFB0",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.",
      },
      {
         lang: "es",
         value: "Desbordamiento de búfer en la función LWZReadByte_ en ext/gd/libgd/gd_gif_in.c en la extensión GD en PHP anterior a 5.1.5 permite a atacantes remotos tener un impacto desconocido mediante un fichero GIF con input_code_size mayor que MAX_LWZ_BITS, lo cual dispara un desbordamiento al inicializar el array tabla.",
      },
   ],
   id: "CVE-2006-4484",
   lastModified: "2025-04-03T01:03:51.193",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "LOW",
            cvssData: {
               accessComplexity: "HIGH",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 2.6,
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               vectorString: "AV:N/AC:H/Au:N/C:N/I:N/A:P",
               version: "2.0",
            },
            exploitabilityScore: 4.9,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: true,
         },
      ],
   },
   published: "2006-08-31T21:04:00.000",
   references: [
      {
         source: "cve@mitre.org",
         url: "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Exploit",
         ],
         url: "http://bugs.php.net/bug.php?id=38112",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
         ],
         url: "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
         ],
         url: "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=log",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21546",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21768",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21842",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/22039",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/22069",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/22225",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/22440",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/22487",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/22538",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/28768",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/28838",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/28845",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/28866",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/28959",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/29157",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/29242",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/29546",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/30717",
      },
      {
         source: "cve@mitre.org",
         url: "http://securitytracker.com/id?1016984",
      },
      {
         source: "cve@mitre.org",
         url: "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
      },
      {
         source: "cve@mitre.org",
         url: "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
      },
      {
         source: "cve@mitre.org",
         url: "http://wiki.rpath.com/Advisories:rPSA-2008-0046",
      },
      {
         source: "cve@mitre.org",
         url: "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:038",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:077",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.novell.com/linux/security/advisories/2006_52_php.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.novell.com/linux/security/advisories/2008_13_sr.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.php.net/ChangeLog-5.php#5.1.5",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
         ],
         url: "http://www.php.net/release_5_1_5.php",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.redhat.com/support/errata/RHSA-2008-0146.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/487683/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/488008/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/19582",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.ubuntu.com/usn/usn-342-1",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.vupen.com/english/advisories/2006/3318",
      },
      {
         source: "cve@mitre.org",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=431568",
      },
      {
         source: "cve@mitre.org",
         url: "https://issues.rpath.com/browse/RPL-2218",
      },
      {
         source: "cve@mitre.org",
         url: "https://issues.rpath.com/browse/RPL-683",
      },
      {
         source: "cve@mitre.org",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004",
      },
      {
         source: "cve@mitre.org",
         url: "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
         ],
         url: "http://bugs.php.net/bug.php?id=38112",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
         ],
         url: "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
         ],
         url: "http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=log",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://rhn.redhat.com/errata/RHSA-2006-0688.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21546",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21768",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/21842",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/22039",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/22069",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/22225",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/22440",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/22487",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/22538",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/28768",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/28838",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/28845",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/28866",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/28959",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/29157",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/29242",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/29546",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/30717",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securitytracker.com/id?1016984",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://wiki.rpath.com/Advisories:rPSA-2008-0046",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:162",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:038",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2008:077",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.novell.com/linux/security/advisories/2006_52_php.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.novell.com/linux/security/advisories/2008_13_sr.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.php.net/ChangeLog-5.php#5.1.5",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
         ],
         url: "http://www.php.net/release_5_1_5.php",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.redhat.com/support/errata/RHSA-2008-0146.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/447866/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/487683/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/488008/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/19582",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/usn-342-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.vupen.com/english/advisories/2006/3318",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=431568",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://issues.rpath.com/browse/RPL-2218",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://issues.rpath.com/browse/RPL-683",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-Other",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.