Vulnerability CVE-2008-5498: Information

Description

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

Severity: MEDIUM (5.0)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

      End including

      5.2.8

      ---

      cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*

      ---