ID de Prueba:	1.3.6.1.4.1.25623.1.0.900186
Categoría:	Web application abuses
Título:	PHP 5.x < 5.2.9 Memory Information Disclosure Vulnerability
Resumen:	PHP is prone to a memory information disclosure; vulnerability.
Descripción:	Summary: PHP is prone to a memory information disclosure vulnerability. Vulnerability Insight: The flaw is due to an improper validation of bgd_color or clrBack argument in imageRotate function. Vulnerability Impact: Successful exploitation could let the attacker read the contents of arbitrary memory locations through a crafted value for an indexed image. Affected Software/OS: PHP versions 5.x through 5.2.8. Solution: Update to version 5.2.9 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5498 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html BugTraq ID: 33002 http://www.securityfocus.com/bid/33002 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html HPdes Security Advisory: HPSBUX02431 http://marc.info/?l=bugtraq&m=124654546101607&w=2 HPdes Security Advisory: HPSBUX02465 http://marc.info/?l=bugtraq&m=125631037611762&w=2 HPdes Security Advisory: SSRT090085 HPdes Security Advisory: SSRT090192 http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 http://downloads.securityfocus.com/vulnerabilities/exploits/33002-2.php http://downloads.securityfocus.com/vulnerabilities/exploits/33002.php http://osvdb.org/51031 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9667 http://www.redhat.com/support/errata/RHSA-2009-0350.html http://securitytracker.com/id?1021494 http://secunia.com/advisories/34642 http://secunia.com/advisories/35306 http://secunia.com/advisories/35650 http://secunia.com/advisories/36701 SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html XForce ISS Database: php-imagerotate-info-disclosure(47635) https://exchange.xforce.ibmcloud.com/vulnerabilities/47635
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.