CVE-2010-3870
Published at:
-
12-11-2010 10:00
Last modified:
-
16-08-2022 03:28
Total changes:
-
2
Description
Common Vulnerability Scoring System (CVSS)
Low
Attack complexity
Network
Attack vector
Low
Availability
Low
Confidentiality
Low
Integrity
-
Privileges required
-
Scope
-
User interaction
6.8
Base score
8.6
6.4
Exploitability score
Impact score
Verification logic
Reference
- http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html
- MDVSA-2010:224-Third Party Advisory
- http://bugs.php.net/bug.php?id=48230
- http://us2.php.net/manual/en/function.utf8-decode.php#83935
- [oss-security] 20101102 Re: utf-8 security issue in php-Mailing List, Third Party Advisory
- [oss-security] 20101102 Re: utf-8 security issue in php-Mailing List, Third Party Advisory
- http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/
- http://bugs.php.net/bug.php?id=49687
- [oss-security] 20101102 Re: utf-8 security issue in php-Mailing List, Third Party Advisory
- [oss-security] 20101102 Re: utf-8 security issue in php-Mailing List, Third Party Advisory
- [oss-security] 20101103 Re: utf-8 security issue in php-Mailing List, Third Party Advisory
- [oss-security] 20101102 utf-8 security issue in php-Mailing List, Third Party Advisory
- [oss-security] 20101102 Re: utf-8 security issue in php-Mailing List, Third Party Advisory
- http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf
- http://svn.php.net/viewvc?view=revision&revision=304959
- RHSA-2010:0919-Third Party Advisory
- 44605-Third Party Advisory, VDB Entry
- 1024797-Third Party Advisory, VDB Entry
- ADV-2010-3081-Third Party Advisory
- 42410-Third Party Advisory
- ADV-2011-0020-Third Party Advisory
- FEDORA-2010-18976-Mailing List, Third Party Advisory
- FEDORA-2010-19011-Mailing List, Third Party Advisory
- SUSE-SR:2010:023-Mailing List, Third Party Advisory
- http://www.php.net/ChangeLog-5.php
- USN-1042-1-Third Party Advisory
- 42812-Third Party Advisory
- ADV-2011-0021-Third Party Advisory
- ADV-2011-0077-Third Party Advisory
- RHSA-2011:0195-Third Party Advisory
- http://support.apple.com/kb/HT4581
- APPLE-SA-2011-03-21-1-Mailing List, Third Party Advisory
- SSRT100826-Mailing List, Third Party Advisory
Keywords