CVE-2012-2376

php: Buffer overflow in com_print_typeinfo() by parsing certain variant types

Published May 21, 2012 CVSS 2.0 · 10.0 Critical EPSS 19.8% KEV · Not listed
Description
Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 7:34 PM
Reserved
Apr 19, 2012, 12:00 AM
Status
Modified
Published
May 21, 2012, 3:55 PM
Modified
Jun 16, 2026, 11:41 PM
Severity
Low
Public date
May 19, 2012, 12:00 AM