Vulnetix
Try Vulnetix Request Demo
CVE-2010-3063 PUBLISHED CVSS 5 MEDIUM

The php_mysqlnd_read_error_from_line function in the Mysqlnd extension in PHP 5.3 through 5.3.2 does not properly calculate a buffer length, which allows context-dependent attackers to trigger a heap-based buffer overflow via crafted inputs that cause a negative length value to be used.

EPSS 0.50% · 65.7th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.50%
65.7th percentile

Affected Products

VendorProductVersions
n/an/an/a
phpphp5.3.0, 5.3.1, 5.3.2

Timeline

References

Open in Interactive Console →