CVE-2010-4156

Name of the Vulnerable Software and Affected Versions Libmbfl version 1.1.0 PHP versions 5.3.x through 5.3.3

Description The issue allows context-dependent attackers to obtain potentially sensitive information via a large value of the length parameter in the mb strcut function.

Recommendations For Libmbfl version 1.1.0, consider restricting the use of the mb strcut function until a patch is available. For PHP versions 5.3.x through 5.3.3, avoid using large values for the length parameter in the mb strcut function to minimize the risk of exploitation.