|
|
Info |
Last Modified |
| 5 months ago |
|
|
|
|
Description |
The PHP memory_limit function contains a flaw that may allow a malicious user to remotely execute arbitrary code. The issue is triggered when an attacker is able to trigger the memory_limit abort within the zend_hash_init() function. It is possible that the flaw may allow the attacker to control the heap, resulting in a loss of confidentiality, integrity, and/or availability.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Other
Impact:
Loss of Integrity
Exploit:
Exploit Unavailable
Disclosure:
OSVDB Verified
OSVDB:
Web Related
|
|
Solution |
Upgrade to version 4.3.8 or 5.0.0 or higher, as it has been reported to fix this vulnerability.
|
|
Products |
|
PHP
 |
4.0.1 |
4.0.2 |
4.0.3 |
4.0.4 |
4.0.5 |
4.0.6 |
4.1.0 |
4.1.1 |
4.1.2 |
4.2.0 |
4.2.1 |
4.2.2 |
4.0.0 |
4.2.3 |
4.3.0 |
4.3.1 |
4.3.4 |
4.3.6 |
3.0.x |
4.3.2 |
4.3.3 |
4.3.5 |
4.3.7 |
5.0.0 Beta.x |
5.0.0 RC1 |
5.0.0 RC2 |
5.0.0 RC3 |
|
|
|
|
|
|
Credit |
- Stefan Esser - sesser
 hardened-php.net - www.hardened-php.net
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
