CVE-2012-0807 in suhosininfo

Summary

Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/19/2012

Disclosure

01/26/2012

Entries

1

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.04812

Activities

Very Low

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!