CVE-2009-3292
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
Exploit likelihood
What each source reports
NVD Score used
7.5
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
- Record
CVE-2009-3292- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
- Record
CVE-2009-3292- Updated
- 2026-11-02
EUVDEUVD-2009-3274 No score
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
- Record
EUVD-2009-3274- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pvvp-vj5f-7cc6 No score
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and...
Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has unknown impact and attack vectors related to "missing sanity checks around exif processing."
- Record
GHSA-pvvp-vj5f-7cc6- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:4.0 From an advisory covering 5 CVEs |
before 5.2.0+dfsg-8+etch16, plus listed versions 5.2.0+dfsg-8+etch155.2.0-105.2.0-10+lenny15.2.0-115.2.0-8+etch1 Show 13 moreShow less5.2.0-8+etch105.2.0-8+etch115.2.0-8+etch11~p15.2.0-8+etch135.2.0-8+etch35.2.0-8+etch45.2.0-8+etch5~pu15.2.0-8+etch65.2.0-8+etch75.2.0-8+etch85.2.0-8+etch95.2.0-8+etch9~bpo31+15.2.0-9 |
5.2.0+dfsg-8+etch16 |
php5Debian:5.0 From an advisory covering 5 CVEs |
before 5.2.6.dfsg.1-1+lenny4, plus listed versions 5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny3 |
5.2.6.dfsg.1-1+lenny4 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
Show 124 moreShow less
| Package | Affected | Fixed |
|---|---|---|
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:4.3.2-54.ent | 0:4.3.2-54.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:4.3.9-3.29 | 0:4.3.9-3.29 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.1.6-24.el5_4.5 | 0:5.1.6-24.el5_4.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3292 is a high vulnerability (CVSS 7.5) in Php, published September 22, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.77%, the 86th percentile. No source names a fixed version.
References
php.net/ChangeLog-5.php
openwall.com/lists/oss-security/2009/11/20/3
secunia.com/advisories/37482
secunia.com/advisories/40262
news.php.net/php.announce/79
marc.info?l=bugtraq&m=127680701405735&w=2
Show 44 moreShow less
marc.info?l=bugtraq&m=130497311408250&w=2
php.net/releases/5_2_11.php
securitytracker.com/id?1022914
osvdb.org/58186
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9982
secunia.com/advisories/36791
debian.org/security/2009/dsa-1940
openwall.com/lists/oss-security/2009/11/20/2
php.net/releases/5_3_1.php
secunia.com/advisories/37412
mandriva.com/security/advisories?name=MDVSA-2009:302
vupen.com/english/advisories/2009/3184
lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
support.apple.com/kb/HT3937
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7652
nvd.nist.gov/vuln/detail/CVE-2009-3292
github.com/advisories/GHSA-pvvp-vj5f-7cc6
access.redhat.com/errata/RHSA-2010:0040
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=506896
bugzilla.redhat.com/show_bug.cgi?id=524222
bugzilla.redhat.com/show_bug.cgi?id=524228
bugzilla.redhat.com/show_bug.cgi?id=529213
bugzilla.redhat.com/show_bug.cgi?id=540459
bugzilla.redhat.com/show_bug.cgi?id=548516
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0040.json
access.redhat.com/security/cve/CVE-2009-2687
cve.org/CVERecord?id=CVE-2009-2687
nvd.nist.gov/vuln/detail/CVE-2009-2687
access.redhat.com/security/cve/CVE-2009-3291
cve.org/CVERecord?id=CVE-2009-3291
nvd.nist.gov/vuln/detail/CVE-2009-3291
access.redhat.com/security/cve/CVE-2009-3292
cve.org/CVERecord?id=CVE-2009-3292
access.redhat.com/security/cve/CVE-2009-3546
cve.org/CVERecord?id=CVE-2009-3546
nvd.nist.gov/vuln/detail/CVE-2009-3546
access.redhat.com/security/cve/CVE-2009-4017
cve.org/CVERecord?id=CVE-2009-4017
nvd.nist.gov/vuln/detail/CVE-2009-4017
access.redhat.com/security/cve/CVE-2009-4142
cve.org/CVERecord?id=CVE-2009-4142
nvd.nist.gov/vuln/detail/CVE-2009-4142