Test Kennung:	1.3.6.1.4.1.25623.1.0.900186
Kategorie:	Web application abuses
Titel:	PHP 'imageRotate()' Memory Information Disclosure Vulnerability
Zusammenfassung:	PHP is prone to a memory information disclosure vulnerability.
Beschreibung:	Summary: PHP is prone to a memory information disclosure vulnerability. Vulnerability Insight: The flaw is due to improper validation of bgd_color or clrBack argument in imageRotate function. Vulnerability Impact: Successful exploitation could let the attacker read the contents of arbitrary memory locations through a crafted value for an indexed image. Affected Software/OS: PHP version 5.x to 5.2.8 on all running platform. Solution: Update to PHP version 5.2.9 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	BugTraq ID: 33002 Common Vulnerability Exposure (CVE) ID: CVE-2008-5498 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html http://www.securityfocus.com/bid/33002 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html HPdes Security Advisory: HPSBUX02431 http://marc.info/?l=bugtraq&m=124654546101607&w=2 HPdes Security Advisory: HPSBUX02465 http://marc.info/?l=bugtraq&m=125631037611762&w=2 HPdes Security Advisory: SSRT090085 HPdes Security Advisory: SSRT090192 http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php http://osvdb.org/51031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667 http://www.redhat.com/support/errata/RHSA-2009-0350.html http://securitytracker.com/id?1021494 http://secunia.com/advisories/34642 http://secunia.com/advisories/35306 http://secunia.com/advisories/35650 http://secunia.com/advisories/36701 SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html XForce ISS Database: php-imagerotate-info-disclosure(47635) https://exchange.xforce.ibmcloud.com/vulnerabilities/47635
Copyright	Copyright (C) 2008 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.