CVE-2009-3294

PHP 5.2.0-5.2.10 - Denial of Service via popen Mode Argument

Title source: llm
STIX 2.1

Description

The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function.

References (11)

Core 11
Core References
Vendor Advisory x_refsource_confirm
http://www.php.net/ChangeLog-5.php#5.2.11
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/20/3
Vendor Advisory mailing-list x_refsource_mlist
http://news.php.net/php.announce/79
Patch, Vendor Advisory x_refsource_confirm
http://www.php.net/releases/5_2_11.php
Vendor Advisory x_refsource_confirm
http://www.php.net/ChangeLog-5.php
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/20/2
Exploit, Vendor Advisory x_refsource_confirm
http://bugs.php.net/bug.php?id=44683
Vendor Advisory x_refsource_confirm
http://www.php.net/releases/5_3_1.php
Mailing List, Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/09/20/1
Broken Link vdb-entry x_refsource_osvdb
http://www.osvdb.org/58188
Vendor Advisory x_refsource_confirm
http://svn.php.net/viewvc?view=revision&revision=287779

Scores

EPSS 0.0273
EPSS Percentile 84.1%

Details

CWE
CWE-134
Status published
Products (1)
php/php 5.2.0 - 5.2.11
Published Sep 22, 2009
Tracked Since Feb 18, 2026