Description

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

Remediation

References

CVE-2009-1271

Related Vulnerabilities

Drupal CVE-2017-6919 Vulnerability (CVE-2017-6919)

PHP 5.3.9 remote code execution

Drupal Core 7.x Directory Traversal (7.0 - 7.66)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2329)

Joomla! Core 3.x.x Cross-Site Scripting (3.1.2 - 3.2.2)

Severity

Medium

Classification

CVE-2009-1271

Tags

Missing Update Known Vulnerabilities