CVE-2010-3062: Infoleak
mysqlndwireprotocol.c in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows remote attackers to (1) read sensitive memory via a modified length value, which is not properly handled by the phpmysqlndokread function; or (2) trigger a heap-based buffer overflow via a modified length value, which is not properly handled by the phpmysqlndrsetheaderread function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3062?
CVE-2010-3062 has a medium severity rating due to potential sensitive memory exposure and heap-based buffer overflow risks.
How do I fix CVE-2010-3062?
To fix CVE-2010-3062, upgrade PHP to version 5.3.3 or later, which addresses the vulnerability.
What are the potential impacts of CVE-2010-3062?
CVE-2010-3062 could allow remote attackers to expose sensitive memory information or execute arbitrary code through a buffer overflow.
Which versions of PHP are affected by CVE-2010-3062?
CVE-2010-3062 affects PHP versions 5.3.0, 5.3.1, and 5.3.2.
Is CVE-2010-3062 exploitable remotely?
Yes, CVE-2010-3062 can be exploited remotely, allowing attackers to potentially gain unauthorized access to sensitive information.