Bug 24395

Summary:	CVE-2010-3710: Segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data
Product:	Sisyphus	Reporter:	Vladimir Lettiev <crux>
Component:	php5	Assignee:	Anton Farygin <rider>
Status:	CLOSED FIXED	QA Contact:	qa-sisyphus
Severity:	blocker
Priority:	P3	CC:	rider
Version:	unstable	Keywords:	security
Hardware:	all
OS:	Linux
URL:	http://bugs.php.net/bug.php?id=52929

Description Vladimir Lettiev 2010-10-23 10:37:36 MSD

There is an error in php_filter_validate_email() function, when validating email addresses, that may cause segfault and crash via long input string

Comment 1 Anton Farygin 2010-10-23 11:54:51 MSD

Спасибо, сейчас исправим.

Comment 2 Repository Robot 2010-10-30 15:30:28 MSD

php5-5.3.3.20100722-alt3 -> sisyphus:

* Sat Oct 23 2010 Anton Farygin <rider@altlinux> 5.3.3.20100722-alt3
- fixed default sendmail_path value
- fixed segfault in filter_var with FILTER_VALIDATE_EMAIL with large amount of data, CVE-2010-3710 (closes: #24395)