CVE-2009-3546
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...
CVE-2009-3546 is a high vulnerability (CVSS 9.3) in Libgd Gd Graphics Library, published October 19, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.2%, the 95th percentile. Fixed in libgd2 2.0.36~rc1~dfsg-3.1.
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
9.3
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-3546- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-3546- Updated
- 2026-11-02
EUVDEUVD-2009-3528 No score
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2009-3528- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w7xp-2c87-fchc No score
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics...
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
- Record
GHSA-w7xp-2c87-fchc- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-3546- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3546 No score
The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
- Record
DEBIAN-CVE-2009-3546- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2009-3546 No score
CVE-2009-3546 in libwmf - Patched by Root
Root has patched CVE-2009-3546 in the libwmf package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2009-3546- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:12 |
before 2.0.36~rc1~dfsg-3.1 | 2.0.36~rc1~dfsg-3.1 |
libgd2Debian:13 |
before 2.0.36~rc1~dfsg-3.1 | 2.0.36~rc1~dfsg-3.1 |
libgd2Debian:14 |
before 2.0.36~rc1~dfsg-3.1 | 2.0.36~rc1~dfsg-3.1 |
libwmfDebian:12 |
All versions, plus listed versions 0.2.12-5.10.2.12-5.20.2.13-10.2.13-1.10.2.13-20.2.14-1 |
None known |
libwmfDebian:13 |
All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 |
None known |
libwmfDebian:14 |
All versions, plus listed versions 0.2.13-1.10.2.13-20.2.14-1 |
None known |
racketDebian:12 |
before 5.0.2-1 | 5.0.2-1 |
racketDebian:13 |
before 5.0.2-1 | 5.0.2-1 |
racketDebian:14 |
before 5.0.2-1 | 5.0.2-1 |
libgd2Debian:4.0 |
before 2.0.33-5.2etch2, plus listed versions 2.0.33-5.22.0.33-5.2etch1 |
2.0.33-5.2etch2 |
Show 161 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libgd2Debian:5.0 |
before 2.0.36~rc1~dfsg-3+lenny1, plus listed versions 2.0.36~rc1~dfsg-3 |
2.0.36~rc1~dfsg-3+lenny1 |
gdRed Hat:enterprise_linux:4::as |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-develRed Hat:enterprise_linux:4::as |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-progsRed Hat:enterprise_linux:4::as |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gdRed Hat:enterprise_linux:4::desktop |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-progsRed Hat:enterprise_linux:4::desktop |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gdRed Hat:enterprise_linux:4::es |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-develRed Hat:enterprise_linux:4::es |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-progsRed Hat:enterprise_linux:4::es |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gdRed Hat:enterprise_linux:4::ws |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gd-progsRed Hat:enterprise_linux:4::ws |
before 0:2.0.28-5.4E.el4_8.1 | 0:2.0.28-5.4E.el4_8.1 |
gdRed Hat:enterprise_linux:5::client_workstation |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gdRed Hat:enterprise_linux:5::client |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-progsRed Hat:enterprise_linux:5::client |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gdRed Hat:enterprise_linux:5::server |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-develRed Hat:enterprise_linux:5::server |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
gd-progsRed Hat:enterprise_linux:5::server |
before 0:2.0.33-9.4.el5_4.2 | 0:2.0.33-9.4.el5_4.2 |
phpRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::as |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::es |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::as |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::es |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::ws |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
libwmfRoot:Debian:12 |
before 0.2.12-5.1.root.io.4 | 0.2.12-5.1.root.io.40.2.12-5.1.root.io.50.2.12-5.1.root.io.10.2.12-5.1.root.io.20.2.12-5.1.root.io.30.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
rootio-libwmfRoot:Debian:12 |
before 0.2.12-5.1.root.io.4 | 0.2.12-5.1.root.io.40.2.12-5.1.root.io.50.2.12-5.1.root.io.10.2.12-5.1.root.io.20.2.12-5.1.root.io.30.2.12-5.1.root.io.60.2.12-5.1.aikido.7 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, references | |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
mandriva.com/security/advisories?name=MDVSA-2009:285
secunia.com/advisories/37069
redhat.com/support/errata/RHSA-2010-0003.html
secunia.com/advisories/37080
securityfocus.com/bid/36712
secunia.com/advisories/38055
Show 37 moreShow less
vupen.com/english/advisories/2009/2929
marc.info?l=oss-security&m=125562113503923&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199
svn.php.net/viewvc?view=revision&revision=289557
openwall.com/lists/oss-security/2009/11/20/5
vupen.com/english/advisories/2009/2930
nvd.nist.gov/vuln/detail/CVE-2009-3546
access.redhat.com/errata/RHSA-2010:0003
access.redhat.com/errata/RHSA-2010:0040
access.redhat.com/security/cve/CVE-2009-3546
bugzilla.redhat.com/show_bug.cgi?id=529213
github.com/advisories/GHSA-w7xp-2c87-fchc
security-tracker.debian.org/tracker/CVE-2009-3546
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0003.json
cve.org/CVERecord?id=CVE-2009-3546
bugzilla.redhat.com/show_bug.cgi?id=506896
bugzilla.redhat.com/show_bug.cgi?id=524222
bugzilla.redhat.com/show_bug.cgi?id=524228
bugzilla.redhat.com/show_bug.cgi?id=540459
bugzilla.redhat.com/show_bug.cgi?id=548516
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0040.json
access.redhat.com/security/cve/CVE-2009-2687
cve.org/CVERecord?id=CVE-2009-2687
nvd.nist.gov/vuln/detail/CVE-2009-2687
access.redhat.com/security/cve/CVE-2009-3291
cve.org/CVERecord?id=CVE-2009-3291
nvd.nist.gov/vuln/detail/CVE-2009-3291
access.redhat.com/security/cve/CVE-2009-3292
cve.org/CVERecord?id=CVE-2009-3292
nvd.nist.gov/vuln/detail/CVE-2009-3292
access.redhat.com/security/cve/CVE-2009-4017
cve.org/CVERecord?id=CVE-2009-4017
nvd.nist.gov/vuln/detail/CVE-2009-4017
access.redhat.com/security/cve/CVE-2009-4142
cve.org/CVERecord?id=CVE-2009-4142
nvd.nist.gov/vuln/detail/CVE-2009-4142