CVE-2012-2688

CVE Details

Release Date:

2012-07-19

Description

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an overflow.

See more information about CVE-2012-2688 from MITRE CVE dictionary and NIST NVD

CVSS v2.0 metrics

NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score:	4.4	Base Metrics:	AV:L/AC:M/Au:N/C:P/I:P/A:P
Access Vector:	Local network	Attack Complexity:	Medium
Authentication:	None required	Confidentiality Impact:	Partial
Integrity Impact:	Partial	Availability Impact:	Partial

Errata information

Platform	Errata	Release Date
Oracle Linux version 5 (php)	ELSA-2013-1814	2013-12-10
Oracle Linux version 5 (php53)	ELSA-2013-1307	2013-10-02
Oracle Linux version 6 (php)	ELSA-2013-0514	2013-02-27

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team