CVE-2011-1464

php: Crash by retrieving string value of a variable, when high precision used

Published Mar 20, 2011 CVSS 2.0 · 4.3 Medium EPSS 2.8% KEV · Not listed
Description
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2408-1 php5 security update
EUVD EUVD EUVD-2011-1469 Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
Ubuntu USN Ubuntu USN USN-1126-1 PHP vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 10:28 PM
Reserved
Mar 19, 2011, 12:00 AM
Status
Modified
Published
Mar 20, 2011, 2:00 AM
Modified
Jun 16, 2026, 11:29 PM
Severity
Public date
Feb 20, 2011, 12:00 AM