CVE-2010-0397
EUVD-2010-042816.03.2010, 19:30
The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php | php | 5.3.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References