oss-sec mailing list archives
utf-8 security issue in php - 2 CVEs?
From: Huzaifa Sidhpurwala <huzaifas () redhat com>
Date: Tue, 16 Nov 2010 12:00:10 +0530
Hi, This is regarding the "utf-8 security issue in php", which was discussed on this list[1]
From the php bug[2], it is clear that this issue has been assigned
CVE-2010-3870 However yesterday another CVE was assigned to this bug i.e. CVE-2009-5016[3] The upstream bug report, describes two issues: a. An integer overflow b. flaw in handling ill-formed UTF8 characters. The integer overflow issue was solved somewhere in year 2009, which was however not a complete fix since the ill-formed UTF8 chars., were still not properly validated. The rest of the issues were solved sometime back. It seems that the integer overflow is not exploitable on its own, you need to couple it with the second issue for the exploit to really work. Therefore do we really need two CVEs for this issue? [1] http://thread.gmane.org/gmane.comp.security.oss.general [2] http://bugs.php.net/bug.php?id=49687 [3] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-5016 -- Huzaifa Sidhpurwala / Red Hat Security Response Team
Current thread:
- utf-8 security issue in php - 2 CVEs? Huzaifa Sidhpurwala (Nov 15)
- Re: utf-8 security issue in php - 2 CVEs? Pierre Joye (Nov 16)
- Re: Re: utf-8 security issue in php - 2 CVEs? Huzaifa Sidhpurwala (Nov 17)
- Re: Re: utf-8 security issue in php - 2 CVEs? Pierre Joye (Nov 17)
- Re: Re: utf-8 security issue in php - 2 CVEs? Huzaifa Sidhpurwala (Nov 17)
- Re: utf-8 security issue in php - 2 CVEs? Pierre Joye (Nov 16)