Computer Security
[EN] securityvulns.ru no-pyccku


PHP integer overflow
Published:09.10.2006
Source:
SecurityVulns ID:6695
Type:library
Threat Level:
6/10
Description:unserialize() function integer overflow.
Affected:PHP : PHP 4.3
 PHP : PHP 5.1
CVE:CVE-2006-4812 (Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).)
Original documentdocumentStefan Esser, Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow (09.10.2006)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod