CVE-2010-4657: High severity PHP PHP vulnerability
Kees Cook reported an information leak flaw in the PHP's XMLWriter, triggered by an invalid UTF-8 string passed to the writeAttribute method:
http://thread.gmane.org/gmane.comp.security.oss.general/4122 http://bugs.php.net/bug.php?id=52998 https://bugzilla.gnome.org/showbug.cgi?id=631551
In the initial report, it was unclear if this is PHP or libxml2 flaw. libxml2 upstream author's reply in the gnome bugzilla bug suggests this issue needs to be addressed in PHP, as the libxml2 API requires input to be valid UTF-8 and \0 terminated string.
Other sources
PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4657?
CVE-2010-4657 is categorized as a moderate severity vulnerability due to the risk of information leakage.
How do I fix CVE-2010-4657?
To fix CVE-2010-4657, update your PHP installation to version 5.4.4 or later.
Which versions of PHP are affected by CVE-2010-4657?
CVE-2010-4657 affects PHP versions from 5.0.0 to 5.4.4.
Can CVE-2010-4657 be exploited remotely?
Yes, CVE-2010-4657 can be exploited remotely if the application processes untrusted input.
What type of vulnerability is CVE-2010-4657?
CVE-2010-4657 is an information leak vulnerability related to the XMLWriter component in PHP.