CVE-2008-2829

php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash)…

published June 23, 2008

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related to the rfc822_write_address function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05265 · 92.5th percentile
Published
2008-06-23T20:00Z
EPSS history
Timeline
  • 23 JUN 20:00Z
    php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service (crash)…
    cvelistv5