The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php53-xmlUpgrade php53-pdoUpgrade php53-snmpUpgrade php53-gdUpgrade php53-dbaUpgrade php53-pspellUpgrade php53-cliUpgrade php53-xmlrpcUpgrade php53-imapUpgrade php53Upgrade php53-odbcUpgrade php53-develUpgrade php53-bcmathUpgrade php53-mbstringUpgrade php53-ldapUpgrade php53-processUpgrade php53-mysqlUpgrade php53-commonUpgrade php53-pgsqlUpgrade php53-intlUpgrade php53-soap | Dec 1, 2016 | Nov 9, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 9, 2010 |
| Oracle_linux | — | Upgrade php53-soapUpgrade php53-develUpgrade php53-commonUpgrade php53-processUpgrade php53-xmlUpgrade php53-pgsqlUpgrade php53-mbstringUpgrade php53-mysqlUpgrade php53-odbcUpgrade php53-imapUpgrade php53-snmpUpgrade php53Upgrade php53-dbaUpgrade php53-xmlrpcUpgrade php53-cliUpgrade php53-bcmathUpgrade php53-ldapUpgrade php53-gdUpgrade php53-intlUpgrade php53-pdoUpgrade php53-pspell | Oct 16, 2024 | Nov 10, 2010 |
| Php | — | Upgrade to PHP version 5.3.3 | Oct 1, 2019 | Nov 10, 2010 |
| Ubuntu | — | Upgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cli | Nov 8, 2024 | Nov 10, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub