CVE の説明

PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.

CVE の情報

メトリクス

メトリクス	スコア	深刻度	CVSS ベクター	出典
V2	5		AV:N/AC:L/Au:N/C:N/I:N/A:P	nvd@nist.gov

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1（0〜100%）の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。

EPSS First.org

エクスプロイト情報

Exploit Database EDB-ID : 36070

公開日 : 2011-08-18 22h00 +00:00
著者 : Maksymilian Arciemowicz
EDB検証済み : Yes

関連製品

構成 0

Php>>Php >> Version ～まで（含む） 5.3.6

Php>>Php >> Version 1.0

Php>>Php >> Version 2.0

Php>>Php >> Version 2.0b10

Php>>Php >> Version 3.0

Php>>Php >> Version 3.0.1

Php>>Php >> Version 3.0.2

Php>>Php >> Version 3.0.3

Php>>Php >> Version 3.0.4

Php>>Php >> Version 3.0.5

Php>>Php >> Version 3.0.6

Php>>Php >> Version 3.0.7

Php>>Php >> Version 3.0.8

Php>>Php >> Version 3.0.9

Php>>Php >> Version 3.0.10

Php>>Php >> Version 3.0.11

Php>>Php >> Version 3.0.12

Php>>Php >> Version 3.0.13

Php>>Php >> Version 3.0.14

Php>>Php >> Version 3.0.15

Php>>Php >> Version 3.0.16

Php>>Php >> Version 3.0.17

Php>>Php >> Version 3.0.18

Php>>Php >> Version 4.0

Php>>Php >> Version 4.0.0

Php>>Php >> Version 4.0.1

Php>>Php >> Version 4.0.2

Php>>Php >> Version 4.0.3

Php>>Php >> Version 4.0.4

Php>>Php >> Version 4.0.5

Php>>Php >> Version 4.0.6

Php>>Php >> Version 4.0.7

Php>>Php >> Version 4.1.0

Php>>Php >> Version 4.1.1

Php>>Php >> Version 4.1.2

Php>>Php >> Version 4.2.0

Php>>Php >> Version 4.2.1

Php>>Php >> Version 4.2.2

Php>>Php >> Version 4.2.3

Php>>Php >> Version 4.3.0

Php>>Php >> Version 4.3.1

Php>>Php >> Version 4.3.2

Php>>Php >> Version 4.3.3

Php>>Php >> Version 4.3.4

Php>>Php >> Version 4.3.5

Php>>Php >> Version 4.3.6

Php>>Php >> Version 4.3.7

Php>>Php >> Version 4.3.8

Php>>Php >> Version 4.3.9

Php>>Php >> Version 4.3.10

Php>>Php >> Version 4.3.11

Php>>Php >> Version 4.4.0

Php>>Php >> Version 4.4.1

Php>>Php >> Version 4.4.2

Php>>Php >> Version 4.4.3

Php>>Php >> Version 4.4.4

Php>>Php >> Version 4.4.5

Php>>Php >> Version 4.4.6

Php>>Php >> Version 4.4.7

Php>>Php >> Version 4.4.8

Php>>Php >> Version 4.4.9

Php>>Php >> Version 5.0.0

Php>>Php >> Version 5.0.1

Php>>Php >> Version 5.0.2

Php>>Php >> Version 5.0.3

Php>>Php >> Version 5.0.4

Php>>Php >> Version 5.0.5

Php>>Php >> Version 5.1.0

Php>>Php >> Version 5.1.1

Php>>Php >> Version 5.1.2

Php>>Php >> Version 5.1.3

Php>>Php >> Version 5.1.4

Php>>Php >> Version 5.1.5

Php>>Php >> Version 5.1.6

Php>>Php >> Version 5.2.0

Php>>Php >> Version 5.2.1

Php>>Php >> Version 5.2.2

Php>>Php >> Version 5.2.3

Php>>Php >> Version 5.2.4

Php>>Php >> Version 5.2.5

Php>>Php >> Version 5.2.6

Php>>Php >> Version 5.2.8

Php>>Php >> Version 5.2.9

Php>>Php >> Version 5.2.10

Php>>Php >> Version 5.2.11

Php>>Php >> Version 5.2.12

Php>>Php >> Version 5.2.13

Php>>Php >> Version 5.2.14

Php>>Php >> Version 5.3.0

Php>>Php >> Version 5.3.1

Php>>Php >> Version 5.3.2

Php>>Php >> Version 5.3.3

Php>>Php >> Version 5.3.4

Php>>Php >> Version 5.3.5

参考資料

http://support.apple.com/kb/HT5130
Tags : x_refsource_CONFIRM

http://www.mandriva.com/security/advisories?name=MDVSA-2011:165
Tags : vendor-advisory, x_refsource_MANDRIVA

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
Tags : vendor-advisory, x_refsource_APPLE

https://exchange.xforce.ibmcloud.com/vulnerabilities/69430
Tags : vdb-entry, x_refsource_XF

http://securityreason.com/achievement_securityalert/101
Tags : third-party-advisory, x_refsource_SREASONRES

http://www.openwall.com/lists/oss-security/2011/08/22/9
Tags : mailing-list, x_refsource_MLIST

http://www.securityfocus.com/bid/49249
Tags : vdb-entry, x_refsource_BID

http://marc.info/?l=full-disclosure&m=131373057621672&w=2
Tags : mailing-list, x_refsource_FULLDISC

日付	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	7.2%	–	–
2022-02-13	–	–	7.2%	–	–
2022-04-03	–	–	7.2%	–	–
2023-03-12	–	–	–	2.25%	–
2023-03-26	–	–	–	2%	–
2023-05-28	–	–	–	1.85%	–
2023-09-17	–	–	–	1.88%	–
2024-02-11	–	–	–	1.88%	–
2024-06-02	–	–	–	1.88%	–
2024-06-16	–	–	–	1.88%	–
2024-12-22	–	–	–	1.88%	–
2025-01-19	–	–	–	1.88%	–
2025-03-18	–	–	–	–	0.96%
2025-03-30	–	–	–	–	0.96%
2025-04-15	–	–	–	–	0.96%
2025-04-25	–	–	–	–	1.43%
2025-05-01	–	–	–	–	3.52%
2025-05-04	–	–	–	–	1.43%
2025-06-01	–	–	–	–	3.52%
2025-06-05	–	–	–	–	1.43%
2025-07-01	–	–	–	–	3.52%
2025-07-05	–	–	–	–	1.43%
2025-07-16	–	–	–	–	1.52%
2025-07-30	–	–	–	–	1.78%
2025-08-01	–	–	–	–	4.34%
2025-08-04	–	–	–	–	1.78%
2025-08-14	–	–	–	–	4.34%
2025-08-15	–	–	–	–	1.78%
2025-09-29	–	–	–	–	1.95%
2025-10-01	–	–	–	–	4.06%
2025-10-04	–	–	–	–	1.66%
2025-10-27	–	–	–	–	1.95%
2025-10-28	–	–	–	–	1.66%
2025-11-01	–	–	–	–	4.06%
2025-11-04	–	–	–	–	1.66%
2025-11-07	–	–	–	–	2.47%
2025-11-18	–	–	–	–	2.47%
2025-11-21	–	–	–	–	2.47%
2025-12-01	–	–	–	–	5.94%
2025-12-04	–	–	–	–	2.47%
2025-12-07	–	–	–	–	2.24%
2025-12-12	–	–	–	–	2.16%
2025-12-27	–	–	–	–	2.55%
2025-12-28	–	–	–	–	2.16%
2026-01-01	–	–	–	–	5.24%
2026-01-04	–	–	–	–	2.16%
2026-03-01	–	–	–	–	5.24%
2026-03-08	–	–	–	–	2.16%
2026-05-10	–	–	–	–	2.01%

日付	パーセンタイル
2022-02-06	8%
2022-02-13	81%
2022-04-03	92%
2023-03-12	88%
2023-03-26	87%
2023-05-28	87%
2023-09-17	87%
2024-02-11	88%
2024-06-02	88%
2024-06-16	89%
2024-12-22	88%
2025-01-19	88%
2025-03-18	75%
2025-03-30	74%
2025-04-15	75%
2025-04-25	8%
2025-05-01	87%
2025-05-04	8%
2025-06-01	87%
2025-06-05	8%
2025-07-01	87%
2025-07-05	8%
2025-07-16	8%
2025-07-30	82%
2025-08-01	89%
2025-08-04	82%
2025-08-14	88%
2025-08-15	82%
2025-09-29	83%
2025-10-01	88%
2025-10-04	81%
2025-10-27	83%
2025-10-28	81%
2025-11-01	88%
2025-11-04	81%
2025-11-07	85%
2025-11-18	84%
2025-11-21	85%
2025-12-01	9%
2025-12-04	85%
2025-12-07	84%
2025-12-12	84%
2025-12-27	85%
2025-12-28	84%
2026-01-01	9%
2026-01-04	84%
2026-03-01	9%
2026-03-08	84%
2026-05-10	84%

CVE-2011-3182 : 詳細

CVE-2011-3182