CVE-2010-3710: Medium severity PHP PHP vulnerability

Published Oct 25, 2010

Updated

Stack consumption vulnerability in the filtervar function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTERVALIDATEEMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Affected Software

19 affected components

PHP PHP=5.2.9

PHP PHP=5.3.1

PHP PHP=5.2.14

PHP PHP=5.2.7

PHP PHP=5.2.2

PHP PHP=5.2.5

PHP PHP=5.2.12

PHP PHP=5.2.11

PHP PHP=5.2.6

PHP PHP=5.3.0

PHP PHP=5.2.3

PHP PHP=5.3.3

PHP PHP=5.2.13

PHP PHP=5.2.0

PHP PHP=5.2.4

PHP PHP=5.3.2

PHP PHP=5.2.10

PHP PHP=5.2.1

PHP PHP=5.2.8

Event History

Oct 25, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3710?

CVE-2010-3710 has a severity that can lead to denial of service due to excessive stack consumption.

How do I fix CVE-2010-3710?

To fix CVE-2010-3710, upgrade to a supported version of PHP that is not vulnerable, specifically versions later than 5.3.3.

Which versions of PHP are affected by CVE-2010-3710?

CVE-2010-3710 affects PHP versions 5.2.x up to 5.2.14 and 5.3.x up to 5.3.3.

Can CVE-2010-3710 be exploited remotely?

Yes, CVE-2010-3710 can be exploited remotely via specially crafted long email address strings.

What is the impact of CVE-2010-3710 on applications?

The impact of CVE-2010-3710 includes memory exhaustion and potential application crashes.