CVE-2010-3064: Buffer Overflow
Stack-based buffer overflow in the phpmysqlndauthwrite function in the Mysqlnd extension in PHP 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) username or (2) database name argument to the (a) mysqlconnect or (b) mysqliconnect function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3064?
CVE-2010-3064 has a high severity due to its potential to cause a denial of service and allow arbitrary code execution.
How do I fix CVE-2010-3064?
To fix CVE-2010-3064, upgrade PHP to version 5.3.3 or later, which addresses the buffer overflow vulnerability.
What systems are affected by CVE-2010-3064?
CVE-2010-3064 affects PHP versions 5.3.0, 5.3.1, and 5.3.2.
What types of attacks can exploit CVE-2010-3064?
Attackers can exploit CVE-2010-3064 through long username or database name inputs, leading to a stack-based buffer overflow.
What are the potential impacts of CVE-2010-3064?
The impacts of CVE-2010-3064 include application crashes, denial of service, and potential remote code execution.