CVE-2010-3710

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Affected Software

Name	Vendor	Start Version	End Version
Php	Php	5.2.0 (including)	5.2.0 (including)
Php	Php	5.2.1 (including)	5.2.1 (including)
Php	Php	5.2.2 (including)	5.2.2 (including)
Php	Php	5.2.3 (including)	5.2.3 (including)
Php	Php	5.2.4 (including)	5.2.4 (including)
Php	Php	5.2.5 (including)	5.2.5 (including)
Php	Php	5.2.6 (including)	5.2.6 (including)
Php	Php	5.2.7 (including)	5.2.7 (including)
Php	Php	5.2.8 (including)	5.2.8 (including)
Php	Php	5.2.9 (including)	5.2.9 (including)
Php	Php	5.2.10 (including)	5.2.10 (including)
Php	Php	5.2.11 (including)	5.2.11 (including)
Php	Php	5.2.12 (including)	5.2.12 (including)
Php	Php	5.2.13 (including)	5.2.13 (including)
Php	Php	5.2.14 (including)	5.2.14 (including)
Php	Php	5.3.0 (including)	5.3.0 (including)
Php	Php	5.3.1 (including)	5.3.1 (including)
Php	Php	5.3.2 (including)	5.3.2 (including)
Php	Php	5.3.3 (including)	5.3.3 (including)
Red Hat Enterprise Linux 5	RedHat	php53-0:5.3.3-1.el5_6.1	*
Php5	Ubuntu	hardy	*
Php5	Ubuntu	jaunty	*
Php5	Ubuntu	karmic	*
Php5	Ubuntu	lucid	*
Php5	Ubuntu	maverick	*
Php5	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-3710
CWE	https://cwe.mitre.org/data/definitions/399.html

Affected Software

References