// For flags

CVE-2010-3870

PHP 5.3.2 - 'xml_utf8_decode()' UTF-8 Input Validation

Severity Score

6.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

7
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.

La función utf8_decode en PHP anterior v5.3.4 no maneja adecuadamente la codificación UTF-8 corta y las secuencias malformadas en los datos UTF-8, lo que hace fácil para los atacantes remotos superar los mecanismos de protección en la secuencia de comandos en sitios cruzados (XSS) e inyección de SQL a través de cadenas manipuladas.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-05-11 First Exploit
  • 2010-10-08 CVE Reserved
  • 2010-11-12 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-05-04 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-20: Improper Input Validation
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (36)
URL Tag Source
http://secunia.com/advisories/42410 Third Party Advisory
http://secunia.com/advisories/42812 Third Party Advisory
http://support.apple.com/kb/HT4581 Third Party Advisory
http://www.openwall.com/lists/oss-security/2010/11/02/1 Mailing List
http://www.openwall.com/lists/oss-security/2010/11/02/11 Mailing List
http://www.openwall.com/lists/oss-security/2010/11/02/2 Mailing List
http://www.openwall.com/lists/oss-security/2010/11/02/4 Mailing List
http://www.openwall.com/lists/oss-security/2010/11/02/6 Mailing List
http://www.openwall.com/lists/oss-security/2010/11/02/8 Mailing List
http://www.openwall.com/lists/oss-security/2010/11/03/1 Mailing List
http://www.securityfocus.com/bid/44605 Third Party Advisory
http://www.securitytracker.com/id?1024797 Third Party Advisory
http://www.vupen.com/english/advisories/2010/3081 Third Party Advisory
http://www.vupen.com/english/advisories/2011/0020 Third Party Advisory
http://www.vupen.com/english/advisories/2011/0021 Third Party Advisory
http://www.vupen.com/english/advisories/2011/0077 Third Party Advisory
URL Date SRC
https://www.exploit-db.com/exploits/34950 2009-05-11
http://bugs.php.net/bug.php?id=48230 2024-08-07
http://bugs.php.net/bug.php?id=49687 2024-08-07
http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html 2024-08-07
http://us2.php.net/manual/en/function.utf8-decode.php#83935 2024-08-07
http://www.acunetix.com/blog/web-security-articles/security-risks-associated-with-utf8_decode 2024-08-07
http://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf 2024-08-07
URL Date SRC
http://svn.php.net/viewvc?view=revision&revision=304959 2023-02-13
URL Date SRC
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html 2023-02-13
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html 2023-02-13
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html 2023-02-13
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html 2023-02-13
http://marc.info/?l=bugtraq&m=133469208622507&w=2 2023-02-13
http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:224 2023-02-13
http://www.php.net/ChangeLog-5.php 2023-02-13
http://www.redhat.com/support/errata/RHSA-2010-0919.html 2023-02-13
http://www.redhat.com/support/errata/RHSA-2011-0195.html 2023-02-13
http://www.ubuntu.com/usn/USN-1042-1 2023-02-13
https://access.redhat.com/security/cve/CVE-2010-3870 2011-02-03
https://bugzilla.redhat.com/show_bug.cgi?id=649056 2011-02-03
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Php
Search vendor "Php"
 Php
Search vendor "Php" for product "Php"
 < 5.2.14
Search vendor "Php" for product "Php" and version " < 5.2.14"
-
Affected
Php
Search vendor "Php"
 Php
Search vendor "Php" for product "Php"
 >= 5.3.0 < 5.3.4
Search vendor "Php" for product "Php" and version " >= 5.3.0 < 5.3.4"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 6.06
Search vendor "Canonical" for product "Ubuntu Linux" and version "6.06"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 9.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "9.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 10.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "10.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 10.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "10.10"
-
Affected