Back to search
CVE-2012-0830
Published: Feb 6, 2012
Modified: Aug 6, 2024
PUBLISHED
Description
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
SSRT100856
vendor-advisory
x_refsource_HP
http://svn.php.net/viewvc?view=revision&revision=323007
x_refsource_CONFIRM
HPSBMU02786
vendor-advisory
x_refsource_HP
51830
vdb-entry
x_refsource_BID
RHSA-2012:0092
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2012:0411
vendor-advisory
x_refsource_SUSE
78819
vdb-entry
x_refsource_OSVDB
47806
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:0426
vendor-advisory
x_refsource_SUSE
DSA-2403
vendor-advisory
x_refsource_DEBIAN
php-phpregistervariableex-code-exec(72911)
vdb-entry
x_refsource_XF
48668
third-party-advisory
x_refsource_SECUNIA
http://www.php.net/ChangeLog-5.php#5.3.10
x_refsource_CONFIRM
47801
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20120202 PHP remote code execution introduced via HashDoS fix
mailing-list
x_refsource_MLIST
[oss-security] 20120203 Re: PHP remote code execution introduced via HashDoS fix
mailing-list
x_refsource_MLIST
SSRT100877
vendor-advisory
x_refsource_HP
1026631
vdb-entry
x_refsource_SECTRACK
HPSBUX02791
vendor-advisory
x_refsource_HP
http://support.apple.com/kb/HT5281
x_refsource_CONFIRM
https://gist.github.com/1725489
x_refsource_MISC
APPLE-SA-2012-05-09-1
vendor-advisory
x_refsource_APPLE
47813
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now