製品・ソフトウェアに関する情報

JVN脆弱性詳細

PHP の xml_utf8_decode 関数における整数オーバーフローの脆弱性

Title	PHP の xml_utf8_decode 関数における整数オーバーフローの脆弱性
Summary	PHP の ext/xml/xml.c 内にある xml_utf8_decode 関数には、整数オーバーフローの脆弱性が存在します。本脆弱性は CVE-2010-3870 とは異なる脆弱性です。
Possible impacts	第三者により、過度に長い UTF-8 エンコーディングを使用する巧妙に細工された文字列を介して、クロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Nov. 12, 2010, midnight
Registration Date	Dec. 22, 2010, 2 p.m.
Last Update	Feb. 18, 2011, 3:03 p.m.

CVSS2.0 : 警告
Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected System

レッドハット

Red Hat Enterprise Linux 4 (as)

Red Hat Enterprise Linux 4 (es)

Red Hat Enterprise Linux 4 (ws)

Red Hat Enterprise Linux 4.8 (as)

Red Hat Enterprise Linux 4.8 (es)

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 4.0

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Workstation 6

RHEL Desktop Workstation 5 (client)

The PHP Group

PHP 5.2.11 未満

サイバートラスト株式会社

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

Asianux Server 3.0

Asianux Server 3.0 (x86-64)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2009-5016	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5016
National Vulnerability Database (NVD)
2	CVE-2009-5016	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-5016

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-189	https://jvndb.jvn.jp/ja/cwe/CWE-189.html

ベンダー情報

No	Name	URL
Asianux Technical Support Network
1	php-5.1.6-27.3.0.1.AXS3	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=1318
MIRACLE LINUX アップデート情報
2	2161	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=2161
PHP
3	PHP 5.2.11 Release Announcement	http://www.php.net/releases/5_2_11.php
Red Hat Security Advisory
4	RHSA-2010:0919	https://rhn.redhat.com/errata/RHSA-2010-0919.html
5	RHSA-2011:0195	https://rhn.redhat.com/errata/RHSA-2011-0195.html

その他

No	Name	URL
Secunia Advisory
1	SA42410	http://secunia.com/advisories/42410
SecurityFocus
2	44889	http://www.securityfocus.com/bid/44889
VUPEN Security
3	VUPEN/ADV-2010-3081	http://www.vupen.com/english/advisories/2010/3081

Change Log

No	Changed Details	Date of change
0	[2010年12月22日] 掲載 [2011年02月18日] 影響を受けるシステム：レッドハット (RHSA-2011:0195) の情報を追加ベンダ情報：レッドハット (RHSA-2011:0195) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2009-5016

Summary	Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870.
Publication Date	Nov. 13, 2010, 7 a.m.
Registration Date	Jan. 29, 2021, 1:28 p.m.
Last Update	Nov. 21, 2024, 10:10 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:php:php:4.3.9:::::::*
cpe:2.3:a:php:php:4.4.9:::::::*
cpe:2.3:a:php:php:3.0:::::::*
cpe:2.3:a:php:php:4.0:beta1::::::
cpe:2.3:a:php:php:3.0.5:::::::*
cpe:2.3:a:php:php:3.0.11:::::::*
cpe:2.3:a:php:php:5.1.5:::::::*
cpe:2.3:a:php:php:5.1.2:::::::*
cpe:2.3:a:php:php:4.0:beta4::::::
cpe:2.3:a:php:php:4.2.0:::::::*
cpe:2.3:a:php:php:5.1.1:::::::*
cpe:2.3:a:php:php:3.0.1:::::::*
cpe:2.3:a:php:php:3.0.2:::::::*
cpe:2.3:a:php:php:4.4.4:::::::*
cpe:2.3:a:php:php:5.0.0:beta1::::::
cpe:2.3:a:php:php:4.1.0:::::::*
cpe:2.3:a:php:php:5.1.6:::::::*
cpe:2.3:a:php:php:4.3.4:::::::*
cpe:2.3:a:php:php:4.0.4:::::::*
cpe:2.3:a:php:php:4.3.0:::::::*
cpe:2.3:a:php:php:4.0.5:::::::*
cpe:2.3:a:php:php:3.0.8:::::::*
cpe:2.3:a:php:php:5.0.5:::::::*
cpe:2.3:a:php:php:4.3.6:::::::*
cpe:2.3:a:php:php:3.0.13:::::::*
cpe:2.3:a:php:php:5.0.1:::::::*
cpe:2.3:a:php:php:5.1.4:::::::*
cpe:2.3:a:php:php:4.3.7:::::::*
cpe:2.3:a:php:php:5.0.4:::::::*
cpe:2.3:a:php:php:4.2.2:::::::*
cpe:2.3:a:php:php::::::::		5.2.10
cpe:2.3:a:php:php:4.4.2:::::::*
cpe:2.3:a:php:php:3.0.7:::::::*
cpe:2.3:a:php:php:4.3.2:::::::*
cpe:2.3:a:php:php:4.3.11:::::::*
cpe:2.3:a:php:php:4.0.0:::::::*
cpe:2.3:a:php:php:3.0.6:::::::*
cpe:2.3:a:php:php:3.0.17:::::::*
cpe:2.3:a:php:php:4.0.7:::::::*
cpe:2.3:a:php:php:4.0.2:::::::*
cpe:2.3:a:php:php:4.3.3:::::::*
cpe:2.3:a:php:php:2.0:::::::*
cpe:2.3:a:php:php:4.1.1:::::::*
cpe:2.3:a:php:php:3.0.15:::::::*
cpe:2.3:a:php:php:3.0.16:::::::*
cpe:2.3:a:php:php:4.4.3:::::::*
cpe:2.3:a:php:php:5.0.0:rc2::::::
cpe:2.3:a:php:php:5.0.3:::::::*
cpe:2.3:a:php:php:3.0.10:::::::*
cpe:2.3:a:php:php:3.0.4:::::::*
cpe:2.3:a:php:php:4.2.3:::::::*
cpe:2.3:a:php:php:5.1.0:::::::*
cpe:2.3:a:php:php:4.4.5:::::::*
cpe:2.3:a:php:php:5.0.0:rc3::::::
cpe:2.3:a:php:php:4.0:::::::*
cpe:2.3:a:php:php:4.0:beta2::::::
cpe:2.3:a:php:php:2.0b10:::::::*
cpe:2.3:a:php:php:4.4.8:::::::*
cpe:2.3:a:php:php:4.0.6:::::::*
cpe:2.3:a:php:php:5.2.0:::::::*
cpe:2.3:a:php:php:4.1.2:::::::*
cpe:2.3:a:php:php:5.0.0:beta3::::::
cpe:2.3:a:php:php:4.3.1:::::::*
cpe:2.3:a:php:php:5.1.3:::::::*
cpe:2.3:a:php:php:3.0.18:::::::*
cpe:2.3:a:php:php:4.0:beta_4_patch1::::::
cpe:2.3:a:php:php:4.4.0:::::::*
cpe:2.3:a:php:php:4.3.10:::::::*
cpe:2.3:a:php:php:4.2.1:::::::*
cpe:2.3:a:php:php:5.0.0:rc1::::::
cpe:2.3:a:php:php:4.0.1:::::::*
cpe:2.3:a:php:php:1.0:::::::*
cpe:2.3:a:php:php:5.0.2:::::::*
cpe:2.3:a:php:php:4.4.6:::::::*
cpe:2.3:a:php:php:3.0.12:::::::*
cpe:2.3:a:php:php:4.4.1:::::::*
cpe:2.3:a:php:php:4.0:beta3::::::
cpe:2.3:a:php:php:5.2.1:::::::*
cpe:2.3:a:php:php:4.0.3:::::::*
cpe:2.3:a:php:php:3.0.14:::::::*
cpe:2.3:a:php:php:3.0.9:::::::*
cpe:2.3:a:php:php:3.0.3:::::::*
cpe:2.3:a:php:php:5.0.0:beta4::::::
cpe:2.3:a:php:php:5.0.0:::::::*
cpe:2.3:a:php:php:4.3.8:::::::*
cpe:2.3:a:php:php:4.3.5:::::::*
cpe:2.3:a:php:php:5.0.0:beta2::::::
cpe:2.3:a:php:php:4.4.7:::::::*

Related information, measures and tools

No	URL	タグ
1	http://bugs.php.net/bug.php?id=49687	Exploit
2	http://bugs.php.net/bug.php?id=49687	Exploit
3	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html
4	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html
5	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html
6	http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html
7	http://secunia.com/advisories/42410
8	http://secunia.com/advisories/42410
9	http://secunia.com/advisories/42812
10	http://secunia.com/advisories/42812
11	http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html	Exploit
12	http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html	Exploit
13	http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf	Exploit
14	http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf	Exploit
15	http://www.redhat.com/support/errata/RHSA-2010-0919.html
16	http://www.redhat.com/support/errata/RHSA-2010-0919.html
17	http://www.redhat.com/support/errata/RHSA-2011-0195.html
18	http://www.redhat.com/support/errata/RHSA-2011-0195.html
19	http://www.securityfocus.com/bid/44889
20	http://www.securityfocus.com/bid/44889
21	http://www.ubuntu.com/usn/USN-1042-1
22	http://www.ubuntu.com/usn/USN-1042-1
23	http://www.vupen.com/english/advisories/2010/3081
24	http://www.vupen.com/english/advisories/2010/3081
25	http://www.vupen.com/english/advisories/2011/0020
26	http://www.vupen.com/english/advisories/2011/0020
27	http://www.vupen.com/english/advisories/2011/0021
28	http://www.vupen.com/english/advisories/2011/0021
29	http://www.vupen.com/english/advisories/2011/0077
30	http://www.vupen.com/english/advisories/2011/0077

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:php:php:4.3.9:::::::*
cpe:2.3:a:php:php:4.4.9:::::::*
cpe:2.3:a:php:php:3.0:::::::*
cpe:2.3:a:php:php:4.0:beta1::::::
cpe:2.3:a:php:php:3.0.5:::::::*
cpe:2.3:a:php:php:3.0.11:::::::*
cpe:2.3:a:php:php:5.1.5:::::::*
cpe:2.3:a:php:php:5.1.2:::::::*
cpe:2.3:a:php:php:4.0:beta4::::::
cpe:2.3:a:php:php:4.2.0:::::::*
cpe:2.3:a:php:php:5.1.1:::::::*
cpe:2.3:a:php:php:3.0.1:::::::*
cpe:2.3:a:php:php:3.0.2:::::::*
cpe:2.3:a:php:php:4.4.4:::::::*
cpe:2.3:a:php:php:5.0.0:beta1::::::
cpe:2.3:a:php:php:4.1.0:::::::*
cpe:2.3:a:php:php:5.1.6:::::::*
cpe:2.3:a:php:php:4.3.4:::::::*
cpe:2.3:a:php:php:4.0.4:::::::*
cpe:2.3:a:php:php:4.3.0:::::::*
cpe:2.3:a:php:php:4.0.5:::::::*
cpe:2.3:a:php:php:3.0.8:::::::*
cpe:2.3:a:php:php:5.0.5:::::::*
cpe:2.3:a:php:php:4.3.6:::::::*
cpe:2.3:a:php:php:3.0.13:::::::*
cpe:2.3:a:php:php:5.0.1:::::::*
cpe:2.3:a:php:php:5.1.4:::::::*
cpe:2.3:a:php:php:4.3.7:::::::*
cpe:2.3:a:php:php:5.0.4:::::::*
cpe:2.3:a:php:php:4.2.2:::::::*
cpe:2.3:a:php:php::::::::		5.2.10
cpe:2.3:a:php:php:4.4.2:::::::*
cpe:2.3:a:php:php:3.0.7:::::::*
cpe:2.3:a:php:php:4.3.2:::::::*
cpe:2.3:a:php:php:4.3.11:::::::*
cpe:2.3:a:php:php:4.0.0:::::::*
cpe:2.3:a:php:php:3.0.6:::::::*
cpe:2.3:a:php:php:3.0.17:::::::*
cpe:2.3:a:php:php:4.0.7:::::::*
cpe:2.3:a:php:php:4.0.2:::::::*
cpe:2.3:a:php:php:4.3.3:::::::*
cpe:2.3:a:php:php:2.0:::::::*
cpe:2.3:a:php:php:4.1.1:::::::*
cpe:2.3:a:php:php:3.0.15:::::::*
cpe:2.3:a:php:php:3.0.16:::::::*
cpe:2.3:a:php:php:4.4.3:::::::*
cpe:2.3:a:php:php:5.0.0:rc2::::::
cpe:2.3:a:php:php:5.0.3:::::::*
cpe:2.3:a:php:php:3.0.10:::::::*
cpe:2.3:a:php:php:3.0.4:::::::*
cpe:2.3:a:php:php:4.2.3:::::::*
cpe:2.3:a:php:php:5.1.0:::::::*
cpe:2.3:a:php:php:4.4.5:::::::*
cpe:2.3:a:php:php:5.0.0:rc3::::::
cpe:2.3:a:php:php:4.0:::::::*
cpe:2.3:a:php:php:4.0:beta2::::::
cpe:2.3:a:php:php:2.0b10:::::::*
cpe:2.3:a:php:php:4.4.8:::::::*
cpe:2.3:a:php:php:4.0.6:::::::*
cpe:2.3:a:php:php:5.2.0:::::::*
cpe:2.3:a:php:php:4.1.2:::::::*
cpe:2.3:a:php:php:5.0.0:beta3::::::
cpe:2.3:a:php:php:4.3.1:::::::*
cpe:2.3:a:php:php:5.1.3:::::::*
cpe:2.3:a:php:php:3.0.18:::::::*
cpe:2.3:a:php:php:4.0:beta_4_patch1::::::
cpe:2.3:a:php:php:4.4.0:::::::*
cpe:2.3:a:php:php:4.3.10:::::::*
cpe:2.3:a:php:php:4.2.1:::::::*
cpe:2.3:a:php:php:5.0.0:rc1::::::
cpe:2.3:a:php:php:4.0.1:::::::*
cpe:2.3:a:php:php:1.0:::::::*
cpe:2.3:a:php:php:5.0.2:::::::*
cpe:2.3:a:php:php:4.4.6:::::::*
cpe:2.3:a:php:php:3.0.12:::::::*
cpe:2.3:a:php:php:4.4.1:::::::*
cpe:2.3:a:php:php:4.0:beta3::::::
cpe:2.3:a:php:php:5.2.1:::::::*
cpe:2.3:a:php:php:4.0.3:::::::*
cpe:2.3:a:php:php:3.0.14:::::::*
cpe:2.3:a:php:php:3.0.9:::::::*
cpe:2.3:a:php:php:3.0.3:::::::*
cpe:2.3:a:php:php:5.0.0:beta4::::::
cpe:2.3:a:php:php:5.0.0:::::::*
cpe:2.3:a:php:php:4.3.8:::::::*
cpe:2.3:a:php:php:4.3.5:::::::*
cpe:2.3:a:php:php:5.0.0:beta2::::::
cpe:2.3:a:php:php:4.4.7:::::::*