PHP Nested Array Processing Lets Remote Users Deny Service
|
|
SecurityTracker Alert ID: 1017771
|
|
SecurityTracker URL: http://securitytracker.com/id?1017771
|
|
CVE Reference: CVE-2007-1285
(Links to External Site)
|
Date: Mar 14 2007
|
Impact: Denial of service via network
|
Exploit Included: Yes
|
Version(s): 4.x, 5.x
|
Description: A vulnerability was reported in PHP. A remote user can cause denial of service conditions.
A remote user can submit a specially crafted variable with a deeply nested array to cause deep recursion in the variable destruction
routines in the Zend Engine. The PHP application may crash.
The original advisory is available at:
http://www.php-security.org/MOPB/MOPB-03-2007.html
Stefan
Esser discovered this vulnerability.
|
Impact: A remote user can cause the target application to crash.
|
Solution: No solution was available at the time of this entry.
|
Vendor URL: www.php.net/ (Links to External Site)
|
Cause: Resource error
|
Underlying OS: UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 14 Mar 2007 16:58:45 -0500
Subject: PHP
|
http://www.php-security.org/MOPB/MOPB-03-2007.html
CVE-2007-1285
|
|
