CVE-2011-1148 in PHP
Summary
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/03/2011
Disclosure
03/18/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56856 | PHP substr_replace resource management | 399 | Not defined | Official fix | CVE-2011-1148 |