CVE-2012-2376: Buffer Overflow

First published: Mon May 21 2012(Updated: )

A security flaw was found in the way the com_print_typeinfo() routine of the PHP scripting language processed certain COM object arguments. If a PHP language based application remotely accepted untrusted com_print_typeinfo() arguments in order to print out a PHP class definition for a dispatchable interface, a remote attacker could provide a specially-crafted COM object, which once processed by the application could lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application. References: [1] <a href="https://isc.sans.edu/diary/PHP+5+4+Remote+Exploit+PoC+in+the+wild/13255">https://isc.sans.edu/diary/PHP+5+4+Remote+Exploit+PoC+in+the+wild/13255</a> [2] <a href="http://packetstormsecurity.org/files/112851/php54-exec.txt">http://packetstormsecurity.org/files/112851/php54-exec.txt</a> [3] <a href="http://www.exploit-db.com/exploits/18861/">http://www.exploit-db.com/exploits/18861/</a> [4] <a href="http://www.reddit.com/r/netsec/comments/tuyp3/isc_diary_php_54_remote_exploit_poc_in_the_wild/">http://www.reddit.com/r/netsec/comments/tuyp3/isc_diary_php_54_remote_exploit_poc_in_the_wild/</a> CVE request: [5] <a href="http://www.openwall.com/lists/oss-security/2012/05/20/1">http://www.openwall.com/lists/oss-security/2012/05/20/1</a> CVE assignment: [6] <a href="http://www.openwall.com/lists/oss-security/2012/05/20/2">http://www.openwall.com/lists/oss-security/2012/05/20/2</a>

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
PHP PHP	<=5.4.3
PHP PHP	=1.0
PHP PHP	=2.0
PHP PHP	=2.0b10
PHP PHP	=3.0
PHP PHP	=3.0.1
PHP PHP	=3.0.2
PHP PHP	=3.0.3
PHP PHP	=3.0.4
PHP PHP	=3.0.5
PHP PHP	=3.0.6
PHP PHP	=3.0.7
PHP PHP	=3.0.8
PHP PHP	=3.0.9
PHP PHP	=3.0.10
PHP PHP	=3.0.11
PHP PHP	=3.0.12
PHP PHP	=3.0.13
PHP PHP	=3.0.14
PHP PHP	=3.0.15
PHP PHP	=3.0.16
PHP PHP	=3.0.17
PHP PHP	=3.0.18
PHP PHP	=4.0-beta_4_patch1
PHP PHP	=4.0-beta1
PHP PHP	=4.0-beta2
PHP PHP	=4.0-beta3
PHP PHP	=4.0-beta4
PHP PHP	=4.0.0
PHP PHP	=4.0.1
PHP PHP	=4.0.2
PHP PHP	=4.0.3
PHP PHP	=4.0.4
PHP PHP	=4.0.5
PHP PHP	=4.0.6
PHP PHP	=4.0.7
PHP PHP	=4.1.0
PHP PHP	=4.1.1
PHP PHP	=4.1.2
PHP PHP	=4.2.0
PHP PHP	=4.2.1
PHP PHP	=4.2.2
PHP PHP	=4.2.3
PHP PHP	=4.3.0
PHP PHP	=4.3.1
PHP PHP	=4.3.2
PHP PHP	=4.3.3
PHP PHP	=4.3.4
PHP PHP	=4.3.5
PHP PHP	=4.3.6
PHP PHP	=4.3.7
PHP PHP	=4.3.8
PHP PHP	=4.3.9
PHP PHP	=4.3.10
PHP PHP	=4.3.11
PHP PHP	=4.4.0
PHP PHP	=4.4.1
PHP PHP	=4.4.2
PHP PHP	=4.4.3
PHP PHP	=4.4.4
PHP PHP	=4.4.5
PHP PHP	=4.4.6
PHP PHP	=4.4.7
PHP PHP	=4.4.8
PHP PHP	=4.4.9
PHP PHP	=5.0.0
PHP PHP	=5.0.0-beta1
PHP PHP	=5.0.0-beta2
PHP PHP	=5.0.0-beta3
PHP PHP	=5.0.0-beta4
PHP PHP	=5.0.0-rc1
PHP PHP	=5.0.0-rc2
PHP PHP	=5.0.0-rc3
PHP PHP	=5.0.1
PHP PHP	=5.0.2
PHP PHP	=5.0.3
PHP PHP	=5.0.4
PHP PHP	=5.0.5
PHP PHP	=5.1.0
PHP PHP	=5.1.1
PHP PHP	=5.1.2
PHP PHP	=5.1.3
PHP PHP	=5.1.4
PHP PHP	=5.1.5
PHP PHP	=5.1.6
PHP PHP	=5.2.0
PHP PHP	=5.2.1
PHP PHP	=5.2.2
PHP PHP	=5.2.3
PHP PHP	=5.2.4
PHP PHP	=5.2.5
PHP PHP	=5.2.6
PHP PHP	=5.2.7
PHP PHP	=5.2.8
PHP PHP	=5.2.9
PHP PHP	=5.2.10
PHP PHP	=5.2.11
PHP PHP	=5.2.12
PHP PHP	=5.2.13
PHP PHP	=5.2.14
PHP PHP	=5.2.15
PHP PHP	=5.2.16
PHP PHP	=5.2.17
PHP PHP	=5.3.0
PHP PHP	=5.3.1
PHP PHP	=5.3.2
PHP PHP	=5.3.3
PHP PHP	=5.3.4
PHP PHP	=5.3.5
PHP PHP	=5.3.6
PHP PHP	=5.3.7
PHP PHP	=5.3.8
PHP PHP	=5.3.9
PHP PHP	=5.4.0
PHP PHP	=5.4.1
PHP PHP	=5.4.2
Microsoft Windows

CVE-2012-2376: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact