Bug 439298 - (CVE-2008-1384) CVE-2008-1384 php crash caused by sprintf() integer overflow
CVE-2008-1384 php crash caused by sprintf() integer overflow
Status: CLOSED WONTFIX
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
http://nvd.nist.gov/nvd.cfm?cvename=C...
: Security
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2008-03-27 18:49 EDT by Lubomir Kundrak
Modified: 2008-03-27 19:02 EDT (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2008-03-27 19:02:00 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Lubomir Kundrak 2008-03-27 18:49:30 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-1384 to the following vulnerability:

Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).

References:

http://securityreason.com/achievement_securityalert/52
http://www.securityfocus.com/archive/1/archive/1/489962/100/0/threaded
http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2027.2.547.2.1120&view=markup
http://www.securityfocus.com/bid/28392
Comment 1 Lubomir Kundrak 2008-03-27 19:02:00 EDT
Red Hat does not consider this a security vulnerability. This can not be
exploited into arbitrary code execution. Moreover, format strings are not likely
to be under attacker's control.

Note You need to log in before you can comment on or make changes to this bug.