Description

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.

Remediation

References

CVE-2013-4635

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14239)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000399)

WordPress Plugin Sender by BestWebSoft Cross-Site Scripting (1.2.0)

WordPress Plugin WP Private Message Insecure Direct Object Reference (1.0.5)

Apache Traffic Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-40743)

Severity

Medium

Classification

CVE-2013-4635

Tags

Missing Update Known Vulnerabilities