CVE-2013-4635: Integer Overflow

Q: What is the severity of CVE-2013-4635?

CVE-2013-4635 has a moderate severity level due to the potential for denial of service (application hang) when exploited.

Q: How do I fix CVE-2013-4635?

To fix CVE-2013-4635, upgrade to PHP version 5.3.26 or later, or 5.4.16 or later.

Q: What systems are affected by CVE-2013-4635?

CVE-2013-4635 affects PHP versions prior to 5.3.26 and 5.4.x prior to 5.4.16.

Q: What is the impact of exploiting CVE-2013-4635?

Exploiting CVE-2013-4635 can cause a denial of service by making the application hang when large arguments are passed to the jdtojewish function.

Q: Is CVE-2013-4635 a coding issue or a configuration issue?

CVE-2013-4635 is considered a coding issue within the PHP Calendar component that handles certain date conversion functionalities.

Published Jun 21, 2013

Updated

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Affected Software

144 affected components

PHP PHP<=5.3.25

PHP PHP=1.0

PHP PHP=2.0

PHP PHP=2.0b10

PHP PHP=3.0

PHP PHP=3.0.1

PHP PHP=3.0.2

PHP PHP=3.0.3

PHP PHP=3.0.4

PHP PHP=3.0.5

PHP PHP=3.0.6

PHP PHP=3.0.7

PHP PHP=3.0.8

PHP PHP=3.0.9

PHP PHP=3.0.10

PHP PHP=3.0.11

PHP PHP=3.0.12

PHP PHP=3.0.13

PHP PHP=3.0.14

PHP PHP=3.0.15

PHP PHP=3.0.16

PHP PHP=3.0.17

PHP PHP=3.0.18

PHP PHP=4.0-beta_4_patch1

PHP PHP=4.0-beta1

PHP PHP=4.0-beta2

PHP PHP=4.0-beta3

PHP PHP=4.0-beta4

PHP PHP=4.0.0

PHP PHP=4.0.1

PHP PHP=4.0.2

PHP PHP=4.0.3

PHP PHP=4.0.4

PHP PHP=4.0.5

PHP PHP=4.0.6

PHP PHP=4.0.7

PHP PHP=4.1.0

PHP PHP=4.1.1

PHP PHP=4.1.2

PHP PHP=4.2.0

PHP PHP=4.2.1

PHP PHP=4.2.2

PHP PHP=4.2.3

PHP PHP=4.3.0

PHP PHP=4.3.1

PHP PHP=4.3.2

PHP PHP=4.3.3

PHP PHP=4.3.4

PHP PHP=4.3.5

PHP PHP=4.3.6

PHP PHP=4.3.7

PHP PHP=4.3.8

PHP PHP=4.3.9

PHP PHP=4.3.10

PHP PHP=4.3.11

PHP PHP=4.4.0

PHP PHP=4.4.1

PHP PHP=4.4.2

PHP PHP=4.4.3

PHP PHP=4.4.4

PHP PHP=4.4.5

PHP PHP=4.4.6

PHP PHP=4.4.7

PHP PHP=4.4.8

PHP PHP=4.4.9

PHP PHP=5.0.0

PHP PHP=5.0.0-beta1

PHP PHP=5.0.0-beta2

PHP PHP=5.0.0-beta3

PHP PHP=5.0.0-beta4

PHP PHP=5.0.0-rc1

PHP PHP=5.0.0-rc2

PHP PHP=5.0.0-rc3

PHP PHP=5.0.1

PHP PHP=5.0.2

PHP PHP=5.0.3

PHP PHP=5.0.4

PHP PHP=5.0.5

PHP PHP=5.1.0

PHP PHP=5.1.1

PHP PHP=5.1.2

PHP PHP=5.1.3

PHP PHP=5.1.4

PHP PHP=5.1.5

PHP PHP=5.1.6

PHP PHP=5.2.0

PHP PHP=5.2.1

PHP PHP=5.2.2

PHP PHP=5.2.3

PHP PHP=5.2.4

PHP PHP=5.2.5

PHP PHP=5.2.6

PHP PHP=5.2.7

PHP PHP=5.2.8

PHP PHP=5.2.9

PHP PHP=5.2.10

PHP PHP=5.2.11

PHP PHP=5.2.12

PHP PHP=5.2.13

PHP PHP=5.2.14

PHP PHP=5.2.15

PHP PHP=5.2.16

PHP PHP=5.2.17

PHP PHP=5.3.0

PHP PHP=5.3.1

PHP PHP=5.3.2

PHP PHP=5.3.3

PHP PHP=5.3.4

PHP PHP=5.3.5

PHP PHP=5.3.6

PHP PHP=5.3.7

PHP PHP=5.3.8

PHP PHP=5.3.9

PHP PHP=5.3.10

PHP PHP=5.3.11

PHP PHP=5.3.12

PHP PHP=5.3.13

PHP PHP=5.3.14

PHP PHP=5.3.15

PHP PHP=5.3.16

PHP PHP=5.3.17

PHP PHP=5.3.18

PHP PHP=5.3.19

PHP PHP=5.3.20

PHP PHP=5.3.21

PHP PHP=5.3.22

PHP PHP=5.3.23

PHP PHP=5.3.24

PHP PHP=5.4.0

PHP PHP=5.4.1

PHP PHP=5.4.2

PHP PHP=5.4.3

PHP PHP=5.4.4

PHP PHP=5.4.5

PHP PHP=5.4.6

PHP PHP=5.4.7

PHP PHP=5.4.8

PHP PHP=5.4.9

PHP PHP=5.4.10

PHP PHP=5.4.11

PHP PHP=5.4.12

PHP PHP=5.4.13

PHP PHP=5.4.14

PHP PHP=5.4.15

Event History

Jun 21, 2013

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4635?

CVE-2013-4635 has a moderate severity level due to the potential for denial of service (application hang) when exploited.

How do I fix CVE-2013-4635?

To fix CVE-2013-4635, upgrade to PHP version 5.3.26 or later, or 5.4.16 or later.

What systems are affected by CVE-2013-4635?