Vulnerability in Php

CVE-2010-3710

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

EPSS: 0.031 (86.4th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.2.0, 5.2.12, 5.2.10
  • N/a — versions n/a

Weakness classification (CWE)

References