CVE-2010-4150: Double Free
Double free vulnerability in the imapdoopen function in the IMAP extension (ext/imap/phpimap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
Other sources
Mateusz Kocielski reported a deficiency in the way PHP IMAP extension processed provided user credentials, when opening user mailbox folder. A local attacker could use this flaw to cause a denial of service (particular php application crash) or, potentially, execute arbitrary code with the privileges of the user running the application, by providing a specially-crafted user credentials.
References: [1] http://svn.php.net/viewvc?view=revision&revision=305062 [2] http://svn.php.net/viewvc/php/php-src/branches/PHP52/ext/imap/phpimap.c?r1=294699&r2=305032&pathrev=305032&view=patch [3] http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:239 [4] http://www.vupen.com/english/advisories/2010/3027
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4150?
CVE-2010-4150 has been classified as a critical vulnerability due to its potential to cause denial of service and possibly execute arbitrary code.
How do I fix CVE-2010-4150?
To fix CVE-2010-4150, you should upgrade your PHP version to at least 5.2.15 or 5.3.4 to eliminate the vulnerability.
What software versions are affected by CVE-2010-4150?
CVE-2010-4150 affects PHP versions 5.2.0 through 5.2.14 and 5.3.0 through 5.3.3.
What type of vulnerability is CVE-2010-4150?
CVE-2010-4150 is a double free vulnerability discovered in the imap_do_open function of the PHP IMAP extension.
Who reported CVE-2010-4150?
CVE-2010-4150 was reported by Mateusz Kocielski.