PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2329)

Description

Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.

Remediation

References

CVE-2012-2329

Related Vulnerabilities

Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-0130)

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10002)

WordPress Plugin WordPress Email Template Designer-WP HTML Mail HTML Injection (2.9.0.3)

WordPress Plugin Debug Bar Multiple Unspecified Vulnerabilities (0.8.4)

WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Scripting (3.0.38)

Severity

Medium

Classification

CVE-2012-2329 CWE-119