Vulnerability CVE-2010-3710: Information

Description

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Severity: MEDIUM (4.3)

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*

      ---