The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2010-11-10T01:00:00
Updated: 2024-08-07T03:34:37.293Z
Reserved: 2010-11-04T00:00:00
Link: CVE-2010-4156
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-11-10T03:00:02.867
Modified: 2024-11-21T01:20:19.820
Link: CVE-2010-4156
Redhat