National Cyber-Alert System

Vulnerability Summary for CVE-2008-3658

Overview

Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Description

Mitre Description references "PHP 5.6 through 5.2.6" -- however research to the changelog for PHP 5 does not reflect a 5.6 release changelog: http://www.php.net/ChangeLog-5.php However, http://www.openwall.com/lists/oss-security/2008/08/08/2: "Those issues are fixed by the recent php-4.4.9 release, but they affect php-5.2.6 as well and the fixes are not part of any released version in case of 5.2."

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statements (disclaimer)

Official Statement from Red Hat (04/07/2009)

This issue has been addressed in the affected versions of PHP packages shipped in Red Hat Enterprise Linux via advisories listed on the following page: https://rhn.redhat.com/errata/CVE-2008-3658.html

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA09-133A

Name: TA09-133A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA09-133A.html

External Source: FEDORA

Name: FEDORA-2009-3848

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html

External Source: FEDORA

Name: FEDORA-2009-3768

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html

External Source: XF

Name: php-imageloadfont-dos(44401)

Hyperlink:http://xforce.iss.net/xforce/xfdb/44401

External Source: VUPEN

Name: ADV-2009-1297

Hyperlink:http://www.vupen.com/english/advisories/2009/1297

External Source: VUPEN

Name: ADV-2009-0320

Hyperlink:http://www.vupen.com/english/advisories/2009/0320

External Source: VUPEN

Name: ADV-2008-3275

Hyperlink:http://www.vupen.com/english/advisories/2008/3275

External Source: VUPEN

Name: ADV-2008-2336

Hyperlink:http://www.vupen.com/english/advisories/2008/2336

External Source: BID

Name: 30649

Hyperlink:http://www.securityfocus.com/bid/30649

External Source: BUGTRAQ

Name: 20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/501376/100/0/threaded

External Source: HP

Name: SSRT080132

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/498647/100/0/threaded

External Source: HP

Name: SSRT080132

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/498647/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:0350

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-0350.html

External Source: CONFIRM

Name: http://www.php.net/archive/2008.php#id2008-08-07-1

Hyperlink:http://www.php.net/archive/2008.php#id2008-08-07-1

External Source: MLIST

Name: [oss-security] 20080813 Re: CVE request: php-5.2.6 overflow issues

Hyperlink:http://www.openwall.com/lists/oss-security/2008/08/13/8

External Source: MLIST

Name: [oss-security] 20080808 CVE request: php-5.2.6 overflow issues

Hyperlink:http://www.openwall.com/lists/oss-security/2008/08/08/2

External Source: MANDRIVA

Name: MDVSA-2009:024

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:024

External Source: MANDRIVA

Name: MDVSA-2009:023

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:023

External Source: MANDRIVA

Name: MDVSA-2009:022

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:022

External Source: MANDRIVA

Name: MDVSA-2009:021

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2009:021

External Source: DEBIAN

Name: DSA-1647

Hyperlink:http://www.debian.org/security/2008/dsa-1647

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2009-0035

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2009-0035

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3549

Hyperlink:http://support.apple.com/kb/HT3549

External Source: GENTOO

Name: GLSA-200811-05

Hyperlink:http://security.gentoo.org/glsa/glsa-200811-05.xml

External Source: SECUNIA

Name: 35306

Hyperlink:http://secunia.com/advisories/35306

External Source: SECUNIA

Name: 35074

Hyperlink:http://secunia.com/advisories/35074

External Source: SECUNIA

Name: 33797

Hyperlink:http://secunia.com/advisories/33797

External Source: SECUNIA

Name: 32884

Hyperlink:http://secunia.com/advisories/32884

External Source: SECUNIA

Name: 32746

Hyperlink:http://secunia.com/advisories/32746

External Source: SECUNIA

Name: 32316

Hyperlink:http://secunia.com/advisories/32316

External Source: SECUNIA

Name: 32148

Hyperlink:http://secunia.com/advisories/32148

External Source: SECUNIA

Name: 31982

Hyperlink:http://secunia.com/advisories/31982

External Source: OVAL

Name: oval:org.mitre.oval:def:9724

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9724

External Source: OSVDB

Name: 47484

Hyperlink:http://osvdb.org/47484

External Source: MISC

Name: http://news.php.net/php.cvs/51219

Hyperlink:http://news.php.net/php.cvs/51219

External Source: HP

Name: SSRT090192

Hyperlink:http://marc.info/?l=bugtraq&m=125631037611762&w=2

External Source: HP

Name: SSRT090192

Hyperlink:http://marc.info/?l=bugtraq&m=125631037611762&w=2

External Source: HP

Name: HPSBUX02401

Hyperlink:http://marc.info/?l=bugtraq&m=123376588623823&w=2

External Source: HP

Name: HPSBUX02401

Hyperlink:http://marc.info/?l=bugtraq&m=123376588623823&w=2

External Source: SUSE

Name: SUSE-SR:2008:021

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

External Source: SUSE

Name: SUSE-SR:2008:018

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html

External Source: APPLE

Name: APPLE-SA-2009-05-12

Hyperlink:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=234102

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=234102

References to Check Content

Identifier:oval:org.mitre.oval:def:9724

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9724