PHP CVEs

Description

The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update_file function via a userspace (1) error or (2) stream handler, which can then be used to destroy and modify internal resources. NOTE: it was later reported that PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 are also affected.

Affected products and versions

• PHP versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0rc1, 5.0rc2, 5.0rc3, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9, 5.2.10, 5.2.11, 5.2.12, 5.2.13, 5.3.0, 5.3.1, 5.3.2

References

• php-security.org http://php-security.org/2010/05/01/mops-2010-001-php-hash_update_file-already-freed-resource-access-vulnerability/index.html Exploit
• secunia.com http://secunia.com/advisories/24542 Vendor Advisory
• www.php-security.org http://www.php-security.org/MOPB/MOPB-28-2007.html Exploit, Vendor Advisory
• www.securityfocus.com http://www.securityfocus.com/bid/23062 Exploit
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/33248
• www.exploit-db.com https://www.exploit-db.com/exploits/3529
• nvd.nist.gov Official NVD record