REDHAT-BUG-673101
First published: Thu Jan 27 2011(Updated: )
Kees Cook reported an information leak flaw in the PHP's XMLWriter, triggered by an invalid UTF-8 string passed to the writeAttribute method: <a href="http://thread.gmane.org/gmane.comp.security.oss.general/4122">http://thread.gmane.org/gmane.comp.security.oss.general/4122</a> <a href="http://bugs.php.net/bug.php?id=52998">http://bugs.php.net/bug.php?id=52998</a> <a href="https://bugzilla.gnome.org/show_bug.cgi?id=631551">https://bugzilla.gnome.org/show_bug.cgi?id=631551</a> In the initial report, it was unclear if this is PHP or libxml2 flaw. libxml2 upstream author's reply in the gnome bugzilla bug suggests this issue needs to be addressed in PHP, as the libxml2 API requires input to be valid UTF-8 and \0 terminated string.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-673101?
The severity of REDHAT-BUG-673101 is classified as an information leak vulnerability.
How do I fix REDHAT-BUG-673101?
To fix REDHAT-BUG-673101, ensure you sanitize inputs and validate UTF-8 strings before passing them to the writeAttribute method.
What are the potential impacts of REDHAT-BUG-673101?
The potential impacts of REDHAT-BUG-673101 include exposure of sensitive information due to improper handling of invalid UTF-8 strings.
Which versions of PHP are affected by REDHAT-BUG-673101?
REDHAT-BUG-673101 affects versions of PHP that implement the XMLWriter class.
Who reported the vulnerability REDHAT-BUG-673101?
The vulnerability REDHAT-BUG-673101 was reported by Kees Cook.
- collector/redhat-bugzilla
- alias/CVE-2010-4657
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/severity
- agent/description
- agent/references
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/php
- canonical/php