admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
cvelist/2010/3xxx/CVE-2010-3870.json

228 lines
8.0 KiB
JSON
Raw Blame History

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2010-3870",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "[oss-security] 20101102 Re: utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/02/2"
},
{
"name" : "[oss-security] 20101102 Re: utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/02/4"
},
{
"name" : "[oss-security] 20101102 Re: utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/02/6"
},
{
"name" : "[oss-security] 20101102 Re: utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/02/8"
},
{
"name" : "[oss-security] 20101102 Re: utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/02/11"
},
{
"name" : "[oss-security] 20101102 utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/02/1"
},
{
"name" : "[oss-security] 20101103 Re: utf-8 security issue in php",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2010/11/03/1"
},
{
"name" : "http://bugs.php.net/bug.php?id=48230",
"refsource" : "MISC",
"url" : "http://bugs.php.net/bug.php?id=48230"
},
{
"name" : "http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html",
"refsource" : "MISC",
"url" : "http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html"
},
{
"name" : "http://us2.php.net/manual/en/function.utf8-decode.php#83935",
"refsource" : "MISC",
"url" : "http://us2.php.net/manual/en/function.utf8-decode.php#83935"
},
{
"name" : "http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/",
"refsource" : "MISC",
"url" : "http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode/"
},
{
"name" : "http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf",
"refsource" : "MISC",
"url" : "http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf"
},
{
"name" : "http://bugs.php.net/bug.php?id=49687",
"refsource" : "CONFIRM",
"url" : "http://bugs.php.net/bug.php?id=49687"
},
{
"name" : "http://svn.php.net/viewvc?view=revision&revision=304959",
"refsource" : "CONFIRM",
"url" : "http://svn.php.net/viewvc?view=revision&revision=304959"
},
{
"name" : "http://www.php.net/ChangeLog-5.php",
"refsource" : "CONFIRM",
"url" : "http://www.php.net/ChangeLog-5.php"
},
{
"name" : "http://support.apple.com/kb/HT4581",
"refsource" : "CONFIRM",
"url" : "http://support.apple.com/kb/HT4581"
},
{
"name" : "APPLE-SA-2011-03-21-1",
"refsource" : "APPLE",
"url" : "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"
},
{
"name" : "FEDORA-2010-18976",
"refsource" : "FEDORA",
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html"
},
{
"name" : "FEDORA-2010-19011",
"refsource" : "FEDORA",
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html"
},
{
"name" : "HPSBOV02763",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=133469208622507&w=2"
},
{
"name" : "SSRT100826",
"refsource" : "HP",
"url" : "http://marc.info/?l=bugtraq&m=133469208622507&w=2"
},
{
"name" : "MDVSA-2010:224",
"refsource" : "MANDRIVA",
"url" : "http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224"
},
{
"name" : "RHSA-2010:0919",
"refsource" : "REDHAT",
"url" : "http://www.redhat.com/support/errata/RHSA-2010-0919.html"
},
{
"name" : "RHSA-2011:0195",
"refsource" : "REDHAT",
"url" : "http://www.redhat.com/support/errata/RHSA-2011-0195.html"
},
{
"name" : "SUSE-SR:2010:023",
"refsource" : "SUSE",
"url" : "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html"
},
{
"name" : "USN-1042-1",
"refsource" : "UBUNTU",
"url" : "http://www.ubuntu.com/usn/USN-1042-1"
},
{
"name" : "44605",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/44605"
},
{
"name" : "1024797",
"refsource" : "SECTRACK",
"url" : "http://www.securitytracker.com/id?1024797"
},
{
"name" : "42410",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/42410"
},
{
"name" : "42812",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/42812"
},
{
"name" : "ADV-2010-3081",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2010/3081"
},
{
"name" : "ADV-2011-0020",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0020"
},
{
"name" : "ADV-2011-0021",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0021"
},
{
"name" : "ADV-2011-0077",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2011/0077"
}
]
}
}
Reference in New Issue View Git Blame Copy Permalink