Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2008-5498

Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.

  • Published: Dec 26, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-5498
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
php / php 5.1.5 5.1.5.x
php / php 5.1.2 5.1.2.x
php / php 5.1.1 5.1.1.x
php / php 5.0.0-beta1 5.0.0-beta1.x
php / php 5.1.6 5.1.6.x
php / php 5.0-rc1 5.0-rc1.x
php / php 5.2.7 5.2.7.x
php / php 5.2.2 5.2.2.x
php / php 5.0.5 5.0.5.x
php / php 5.0.1 5.0.1.x
php / php 5.1.4 5.1.4.x
php / php 5.2.5 5.2.5.x
php / php 5.0.4 5.0.4.x
php / php - 5.2.8.x
php / php 5.0-rc3 5.0-rc3.x
php / php 5.2.6 5.2.6.x
php / php 5.0.0-rc2 5.0.0-rc2.x
php / php 5.2.3 5.2.3.x
php / php 5.0.3 5.0.3.x
php / php 5.1.0 5.1.0.x
php / php 5.0.0-rc3 5.0.0-rc3.x
php / php 5.2.0 5.2.0.x
php / php 5.0-rc2 5.0-rc2.x
php / php 5.2.4 5.2.4.x
php / php 5.0.0-beta3 5.0.0-beta3.x
php / php 5.1.3 5.1.3.x
php / php 5.0.0-rc1 5.0.0-rc1.x
php / php 5.0.2 5.0.2.x
php / php 5.2.1 5.2.1.x
php / php 5.0.0-beta4 5.0.0-beta4.x
php / php 5 5.x
php / php 5.0.0 5.0.0.x
php / php 5.0.0-beta2 5.0.0-beta2.x