QwikSec

Security Database

CVE

CWE

Training

CVE-2011-1464

Published: Mar 20, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_HP

vendor-advisory

x_refsource_MANDRIVA

http://www.php.net/releases/5_3_6.php

x_refsource_CONFIRM

http://www.php.net/ChangeLog-5.php

x_refsource_CONFIRM

http://www.php.net/archive/2011.php

x_refsource_CONFIRM

vendor-advisory

x_refsource_HP

http://bugs.php.net/bug.php?id=54055

x_refsource_CONFIRM

vendor-advisory

x_refsource_MANDRIVA

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.