PHP integer overflow
Published:		09.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6695
Type:		library
Level:		6/10
Description:		unserialize() function integer overflow.

Affected:		PHP : PHP 4.3
		PHP : PHP 5.1
CVE:		CVE-2006-4812 (Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).)

Original document

Stefan Esser, Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow (09.10.2006)

Discuss:

Read or add your comments to this news (0 comments)