CVE-2011-1153
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 6.8%
Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
Produtos afetados
n/a · n/aReferências
http://bugs.php.net/bug.php?id=54247http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.htmlhttp://openwall.com/lists/oss-security/2011/03/14/13http://openwall.com/lists/oss-security/2011/03/14/14http://openwall.com/lists/oss-security/2011/03/14/24https://bugzilla.redhat.com/show_bug.cgi?id=688378http://secunia.com/advisories/43744https://exchange.xforce.ibmcloud.com/vulnerabilities/66079http://support.apple.com/kb/HT5002