Mateusz Kocielski reported a deficiency in the way PHP IMAP extension processed provided user credentials, when opening user mailbox folder. A local attacker could use this flaw to cause a denial of service (particular php application crash) or, potentially, execute arbitrary code with the privileges of the user running the application, by providing a specially-crafted user credentials.

References: [1] http://svn.php.net/viewvc?view=revision&revision=305062 [2] http://svn.php.net/viewvc/php/php-src/branches/PHP52/ext/imap/phpimap.c?r1=294699&r2=305032&pathrev=305032&view=patch [3] http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:239 [4] http://www.vupen.com/english/advisories/2010/3027