CVE-2010-4698: Buffer Overflow
Published Jan 18, 2011
·Updated
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.
Affected Software
14 affected components
PHP PHP=5.3.1
PHP PHP=5.2.14
PHP PHP=5.2.2
PHP PHP=5.2.12
PHP PHP=5.2.11
PHP PHP=5.3.0
PHP PHP=5.2.3
PHP PHP=5.3.3
PHP PHP=5.2.13
PHP PHP=5.2.0
PHP PHP=5.2.4
PHP PHP=5.3.2
PHP PHP=5.2.10
PHP PHP=5.2.1
Event History
Jan 18, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4698?
CVE-2010-4698 has a severity rating that can lead to denial of service due to a stack-based buffer overflow.
2
How do I fix CVE-2010-4698?
To fix CVE-2010-4698, upgrade PHP to version 5.2.15 or later, or 5.3.4 or later.
3
What software versions are affected by CVE-2010-4698?
CVE-2010-4698 affects PHP versions prior to 5.2.15 and 5.3.x prior to 5.3.4.
4
What functionality is exploited in CVE-2010-4698?
CVE-2010-4698 exploits the imagepstext function in the GD extension with a large number of anti-aliasing steps.
5
What are the consequences of exploiting CVE-2010-4698?
Exploitation of CVE-2010-4698 can cause an application crash, leading to potential denial of service.