CVE-2012-0830 in PHP
摘要 (英语)
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
预定
2012-01-19
披露
2012-02-06
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 4600 | PHP php_variables.c php_register_variable_ex 拒绝服务 | 399 | 概念验证 | 官方修复 | CVE-2012-0830 |