blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2009-3294

MEDIUM 5.0 CVSS 2.0
Published
September 22, 2009
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-134
CVSS vector
AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function.

Affected products and versions

  • PHP — From 5.2.0 (including) to 5.2.11 (excluding)
  • PHP — From 5.3.0 (including) to 5.3.1 (excluding)

References

  • bugs.php.net http://bugs.php.net/bug.php?id=44683 Exploit, Vendor Advisory
  • news.php.net http://news.php.net/php.announce/79 Vendor Advisory
  • svn.php.net http://svn.php.net/viewvc?view=revision&revision=287779 Vendor Advisory
  • www.openwall.com http://www.openwall.com/lists/oss-security/2009/09/20/1 Mailing List, Patch
  • www.openwall.com http://www.openwall.com/lists/oss-security/2009/11/20/2 Mailing List
  • www.openwall.com http://www.openwall.com/lists/oss-security/2009/11/20/3 Mailing List
  • www.osvdb.org http://www.osvdb.org/58188 Broken Link
  • www.php.net http://www.php.net/ChangeLog-5.php Vendor Advisory
  • www.php.net http://www.php.net/ChangeLog-5.php#5.2.11 Vendor Advisory
  • www.php.net http://www.php.net/releases/5_2_11.php Patch, Vendor Advisory
  • www.php.net http://www.php.net/releases/5_3_1.php Vendor Advisory
  • nvd.nist.gov Official NVD record