Description

Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

Remediation

References

CVE-2011-1464

Related Vulnerabilities

PHP NULL Pointer Dereference Vulnerability (CVE-2018-14884)

Oracle Database Server CVE-2012-3220 Vulnerability (CVE-2012-3220)

Jenkins Improper Handling of Inconsistent Structural Elements Vulnerability (CVE-2021-21640)

b2evolution Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2021-28242)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4191)

Severity

Medium

Classification

CVE-2011-1464 CWE-119

Tags

Missing Update Known Vulnerabilities