Every CVE Search/ Get API key

CVE-2013-4635

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before...

5.0 MediumFix available

CVE-2013-4635 is a medium vulnerability (CVSS 5.0) in Php, published June 18, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.23%, the 91st percentile. Fixed in php 5.4.16-1.mga3.

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Exploit likelihood

4.23%Up 2.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Record
CVE-2013-4635
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Record
CVE-2013-4635
Updated
2026-11-02
EUVDEUVD-2013-4491 No score

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Record
EUVD-2013-4491
Updated
2026-11-03
GitHub AdvisoriesGHSA-mw77-m68p-3ffp No score

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before...

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Record
GHSA-mw77-m68p-3ffp
Updated
2026-11-02
OSVMGASA-2013-0172 No score

Updated php packages fix security vulnerabilies

Heap based buffer overflow in quoted_printable_encode() in PHP before version 5.4.16 (CVE-2013-2110).

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function. (CVE-2013-4635)

This update provides PHP version 5.4.16 which fixes this as well as several other issues.

Record
MGASA-2013-0172
Updated
2026-11-02
OSVMGASA-2013-0176 No score

Updated php package fixes several issues

Fixed php bug #64879 (Heap based buffer overflow in quoted_printable_encode, CVE-2013-2110).

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function. (CVE-2013-4635)

See the changelog for additional bug fixes.

Record
MGASA-2013-0176
Updated
2026-11-02
Show 4 moreShow less
OSVSUSE-SU-2015:0370-1 No score

Security update for php53

This update fixes the following vulnerabilities in php:

* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
  (CVE-2014-3668)

Security Issues:

* CVE-2014-3669
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
Record
SUSE-SU-2015:0370-1
Updated
2026-11-02
OSVSUSE-SU-2015:0436-1 No score

Security update for php53

This update fixes the following vulnerabilities in php:

* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
  (CVE-2014-3668)

Security Issues:

* CVE-2014-3669
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
Record
SUSE-SU-2015:0436-1
Updated
2026-11-02
OSVSUSE-SU-2015:1018-1 No score

Security update for php53

This update fixes the following vulnerabilities in php:

* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
  (CVE-2014-3668)

Security Issues:

* CVE-2014-3669
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
Record
SUSE-SU-2015:1018-1
Updated
2026-11-02
OSVSUSE-SU-2015:1265-1 No score

Security update for php53

This update fixes the following vulnerabilities in php:

* Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)
* Integer overflow in unserialize(). (CVE-2014-3669)
* Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().
  (CVE-2014-3668)

Security Issues:

* CVE-2014-3669
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669>
* CVE-2014-3670
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670>
* CVE-2014-3668
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
Record
SUSE-SU-2015:1265-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
Mageia:3
 before 5.4.16-1.mga3
5.4.16-1.mga3
php-apc
Mageia:3
 before 3.1.14-7.1.mga3
3.1.14-7.1.mga3
php-gd-bundled
Mageia:3
 before 5.4.16-1.mga3
5.4.16-1.mga3
php-timezonedb
Mageia:3
 before 2013.3-1.mga3
2013.3-1.mga3
php
Mageia:2
 before 5.3.26-1.mga2
5.3.26-1.mga2
php-apc
Mageia:2
 before 3.1.13-1.8.mga2
3.1.13-1.8.mga2
php-eaccelerator
Mageia:2
 before 0.9.6.1-10.10.mga2
0.9.6.1-10.10.mga2
php-gd-bundled
Mageia:2
 before 5.3.26-1.mga2
5.3.26-1.mga2
php-timezonedb
Mageia:2
 before 2013.3-1.mga2
2013.3-1.mga2
php-firebird
Mageia:2
 before 5.3.26-1.mga2
5.3.26-1.mga2
php-pdo_firebird
Mageia:2
 before 5.3.26-1.mga2
5.3.26-1.mga2

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 115 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open