CVE-2010-3717
TYPO3 4.2.x-4.3.x-4.4.x - Denial of Service via Long Email Address String
Title source: llmDescription
The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/43786
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2010/dsa-2121
Vendor Advisory x_refsource_confirm
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
Scores
EPSS
0.0053
EPSS Percentile
67.6%
Details
CWE
CWE-264
Status
published
Products (26)
typo3/typo3
4.2.0
typo3/typo3
4.2.1
typo3/typo3
4.2.2
typo3/typo3
4.2.3
typo3/typo3
4.2.4
typo3/typo3
4.2.5
typo3/typo3
4.2.6
typo3/typo3
4.2.7
typo3/typo3
4.2.8
typo3/typo3
4.2.9
... and 16 more
Published
Oct 25, 2010
Tracked Since
Feb 18, 2026