The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade php53Upgrade php53-cliUpgrade php53-xmlrpcUpgrade php53-pdoUpgrade php53-snmpUpgrade php53-gdUpgrade php53-imapUpgrade php53-dbaUpgrade php53-odbcUpgrade php53-xmlUpgrade php53-pspellUpgrade php53-mysqlUpgrade php53-bcmathUpgrade php53-ldapUpgrade php53-develUpgrade php53-commonUpgrade php53-mbstringUpgrade php53-soapUpgrade php53-pgsqlUpgrade php53-intlUpgrade php53-process | Dec 1, 2016 | Nov 9, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 9, 2010 |
| Oracle_linux | — | Upgrade php53-processUpgrade php53-odbcUpgrade php53-commonUpgrade php53-xmlUpgrade php53-develUpgrade php53-pgsqlUpgrade php53-soapUpgrade php53-mbstringUpgrade php53-imapUpgrade php53-mysqlUpgrade php53Upgrade php53-pspellUpgrade php53-dbaUpgrade php53-xmlrpcUpgrade php53-gdUpgrade php53-bcmathUpgrade php53-cliUpgrade php53-intlUpgrade php53-ldapUpgrade php53-snmpUpgrade php53-pdo | Oct 16, 2024 | Nov 10, 2010 |
| Php | — | Upgrade to PHP version 5.3.3 | Oct 1, 2019 | Nov 10, 2010 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-cgiUpgrade php5-cli | Nov 8, 2024 | Nov 10, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub