CVE-2012-0789 in PHP

Resumen (Inglés)

Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2012-01-19

Divulgación

2012-02-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
60175	PHP strtotime denegación de servicio	399	Prueba de concepto	Arreglo oficial	CVE-2012-0789

Fuentes

• MITRE
• NVD
• CVE Details