CVE-2009-3294
First published: Tue Sep 22 2009(Updated: )
The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHP | >=5.2.0<5.2.11 | |
| PHP | >=5.3.0<5.3.1 | |
| Microsoft Windows 7 | ||
| Microsoft Windows Server | ||
| Microsoft Windows XP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.osvdb.org/58188
- http://www.php.net/releases/5_2_11.php
- http://www.openwall.com/lists/oss-security/2009/09/20/1
- http://svn.php.net/viewvc?view=revision&revision=287779
- http://bugs.php.net/bug.php?id=44683
- http://www.php.net/ChangeLog-5.php#5.2.11
- http://www.openwall.com/lists/oss-security/2009/11/20/2
- http://www.openwall.com/lists/oss-security/2009/11/20/3
- http://www.php.net/ChangeLog-5.php
- http://www.php.net/releases/5_3_1.php
- http://news.php.net/php.announce/79
Frequently Asked Questions
What is the severity of CVE-2009-3294?
CVE-2009-3294 is categorized as a medium severity vulnerability that can lead to a denial of service.
How do I fix CVE-2009-3294?
To fix CVE-2009-3294, upgrade to PHP version 5.2.11 or 5.3.1 or later.
What software is affected by CVE-2009-3294?
CVE-2009-3294 affects PHP versions prior to 5.2.11 and 5.3.x versions prior to 5.3.1 on certain Windows operating systems.
What type of attack does CVE-2009-3294 enable?
CVE-2009-3294 allows attackers to cause a denial of service by exploiting the popen API function with crafted arguments.
On which platforms does CVE-2009-3294 occur?
CVE-2009-3294 specifically occurs on certain Windows operating systems running affected versions of PHP.
- collector/nvd-historical
- agent/type
- agent/remedy
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/php
- canonical/php
- version/php/5.2.0
- version/php/5.3.0
- vendor/microsoft
- canonical/microsoft windows 7
- canonical/microsoft windows server
- canonical/microsoft windows xp