CVE Vulnerabilities

CVE-2010-3717

Published: Oct 25, 2010 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
LOW

The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710.

Affected Software

Name Vendor Start Version End Version
Typo3 Typo3 4.2.0 (including) 4.2.0 (including)
Typo3 Typo3 4.2.1 (including) 4.2.1 (including)
Typo3 Typo3 4.2.2 (including) 4.2.2 (including)
Typo3 Typo3 4.2.3 (including) 4.2.3 (including)
Typo3 Typo3 4.2.4 (including) 4.2.4 (including)
Typo3 Typo3 4.2.5 (including) 4.2.5 (including)
Typo3 Typo3 4.2.6 (including) 4.2.6 (including)
Typo3 Typo3 4.2.7 (including) 4.2.7 (including)
Typo3 Typo3 4.2.8 (including) 4.2.8 (including)
Typo3 Typo3 4.2.9 (including) 4.2.9 (including)
Typo3 Typo3 4.2.10 (including) 4.2.10 (including)
Typo3 Typo3 4.2.11 (including) 4.2.11 (including)
Typo3 Typo3 4.2.12 (including) 4.2.12 (including)
Typo3 Typo3 4.2.13 (including) 4.2.13 (including)
Typo3 Typo3 4.2.14 (including) 4.2.14 (including)
Typo3 Typo3 4.3.0 (including) 4.3.0 (including)
Typo3 Typo3 4.3.1 (including) 4.3.1 (including)
Typo3 Typo3 4.3.2 (including) 4.3.2 (including)
Typo3 Typo3 4.3.3 (including) 4.3.3 (including)
Typo3 Typo3 4.3.4 (including) 4.3.4 (including)
Typo3 Typo3 4.3.5 (including) 4.3.5 (including)
Typo3 Typo3 4.3.6 (including) 4.3.6 (including)
Typo3 Typo3 4.4 (including) 4.4 (including)
Typo3 Typo3 4.4.1 (including) 4.4.1 (including)
Typo3 Typo3 4.4.2 (including) 4.4.2 (including)
Typo3 Typo3 4.4.3 (including) 4.4.3 (including)
Typo3-src Ubuntu dapper *
Typo3-src Ubuntu hardy *
Typo3-src Ubuntu jaunty *
Typo3-src Ubuntu karmic *
Typo3-src Ubuntu lucid *
Typo3-src Ubuntu maverick *
Typo3-src Ubuntu upstream *

References