Description

Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

Remediation

References

CVE-2011-1464

Related Vulnerabilities

WordPress Plugin SEO Backlinks Cross-Site Request Forgery (4.0.1)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35987)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29251)

Drupal Core 8.x.x Security Bypass (8.0.0 - 8.6.18)

WordPress Plugin WP-Live Chat by 3CX Information Disclosure (8.0.28)

Severity

Medium

Classification

CVE-2011-1464 CWE-119

Tags

Missing Update Known Vulnerabilities