CVE-2008-1384

Advisory lineage Upstream: 0 Downstream: 2
Modified
Published: 27 Mar 2008, 17:00
Last modified:07 Aug 2024, 08:17

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
5 MEDIUM
v2.0 (nvd)
EPSS Score
2.69% LOW
3% probability +0.32%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

27 Mar 2008, 17:00
Published
Vulnerability first disclosed
07 Aug 2024, 08:17
Last Modified
Vulnerability information updated

Description

Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the php_sprintf_appendstring function in formatted_print.c and probably other functions for formatted strings (aka *printf functions).

CVSS Metrics

  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 2.69%• Percentile: 86%

Techniques & Countermeasures

  • CWE-189•Numeric Errors

    Weaknesses in this category are related to improper calculation or conversion of numbers.

Affected Systems

  • Unknown•PHP

    ≤ 5.2.5

References (22)