CVE-2010-3063: Buffer Overflow
The phpmysqlndreaderrorfromline function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3063?
CVE-2010-3063 is classified as a high severity vulnerability due to the potential for heap-based buffer overflow exploitation.
How do I fix CVE-2010-3063?
To fix CVE-2010-3063, upgrade PHP to version 5.3.3 or later, which addresses this vulnerability.
What versions of PHP are affected by CVE-2010-3063?
CVE-2010-3063 affects PHP versions 5.3.0, 5.3.1, and 5.3.2.
What type of vulnerability is CVE-2010-3063?
CVE-2010-3063 is a heap-based buffer overflow vulnerability in the Mysqlnd extension.
Who can exploit CVE-2010-3063?
Context-dependent attackers can exploit CVE-2010-3063 through crafted inputs that trigger the vulnerability.