Vulnerability Name: | CVE-2010-3717 (CCN-62771) | ||||||||||||
Assigned: | 2010-10-03 | ||||||||||||
Published: | 2010-10-03 | ||||||||||||
Updated: | 2010-10-27 | ||||||||||||
Summary: | The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710. | ||||||||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||||||
Vulnerability Type: | CWE-264 | ||||||||||||
Vulnerability Consequences: | Denial of Service | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2010-3717 Source: CCN Type: TYPO3-SA-2010-020 Multiple vulnerabilities in TYPO3 Core Source: CONFIRM Type: Vendor Advisory http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/ Source: DEBIAN Type: UNKNOWN DSA-2121 Source: DEBIAN Type: DSA-2121 typo3-src -- several vulnerabilities Source: CCN Type: OSVDB ID: 69219 TYPO3 t3lib_div::validEmail Function PHP FILTER_VALIDATE_EMAIL Operation Remote Overflow DoS Source: BID Type: UNKNOWN 43786 Source: CCN Type: BID-43786 TYPO3 Core TYPO3-SA-2010-020 Multiple Security Vulnerabilities Source: XF Type: UNKNOWN typo3-t3libdivvalidemail-dos(62771) | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
Oval Definitions | |||||||||||||
| |||||||||||||
BACK |