Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2010-1915
Description:The preg_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature, modification of ZVALs whose values are not updated in the associated local variables, and access of previously-freed memory.
Test IDs: 1.3.6.1.4.1.25623.1.0.67955   1.3.6.1.4.1.25623.1.0.67959  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-1915
http://www.php-security.org/2010/05/09/mops-2010-017-php-preg_quote-interruption-information-leak-vulnerability/index.html
SuSE Security Announcement: SUSE-SR:2010:017 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
SuSE Security Announcement: SUSE-SR:2010:018 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html
XForce ISS Database: php-pregquote-information-disclosure(58586)
https://exchange.xforce.ibmcloud.com/vulnerabilities/58586




© 1998-2025 E-Soft Inc. All rights reserved.