CVE-2012-0830 in PHP
Résumé (Anglaise)
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
Réserver
19/01/2012
Divulgation
06/02/2012
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4600 | PHP php_variables.c php_register_variable_ex déni de service | 399 | Preuve de concept | Correctif officiel | CVE-2012-0830 |