PHP php_stream_filter_create() buffer overflow
Published:		08.04.2007
Source:		PHP-SECURITY
SecurityVulns ID:		7549
Type:		remote
Level:		5/10
Description:		Off-by-one overflow on the filter name ending with dot.

Affected:		PHP : PHP 5.2
CVE:		CVE-2007-1824 (Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.)

Original document

PHP-SECURITY, MOPB-42-2007:PHP 5 php_stream_filter_create() Off By One Vulnerablity (08.04.2007)

Discuss:

Read or add your comments to this news (0 comments)