Description

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the (1) ZEND_BW_XOR opcode (shift_left_function), (2) ZEND_SL opcode (bitwise_xor_function), or (3) ZEND_SR opcode (shift_right_function), related to the convert_to_long_base function.

Remediation

References

CVE-2010-1914

Related Vulnerabilities

SharePoint CVE-2024-43466 Vulnerability (CVE-2024-43466)

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)

WordPress Plugin XVE Various Embed Multiple Cross-Site Scripting Vulnerabilities (1.0.3)

WordPress Plugin WordPress Popups for Marketing and Email Newsletters, Lead Generation and Conversions by OptinMonster Security Bypass (1.1.4.5)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5012)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2010-1914