CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
89.3%
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
Vendor | Product | Version | CPE |
---|---|---|---|
php | php | 3.0.12 | cpe:/a:php:php:3.0.12::: |
php | php | 5.2.10 | cpe:/a:php:php:5.2.10::: |
php | php | 3.0.13 | cpe:/a:php:php:3.0.13::: |
php | php | 4.3.2 | cpe:/a:php:php:4.3.2::: |
php | php | 5.2.4 | cpe:/a:php:php:5.2.4::: |
php | php | 5.0.2 | cpe:/a:php:php:5.0.2::: |
php | php | 5.2.8 | cpe:/a:php:php:5.2.8::: |
php | php | 3.0.15 | cpe:/a:php:php:3.0.15::: |
php | php | 3.0.4 | cpe:/a:php:php:3.0.4::: |
php | php | cpe:/a:php:php:::: |
bugs.php.net/bug.php?id=53574
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html
rhn.redhat.com/errata/RHSA-2012-0071.html
secunia.com/advisories/48668
support.apple.com/kb/HT5002
www.debian.org/security/2011/dsa-2266
www.mandriva.com/security/advisories?name=MDVSA-2011:052
www.mandriva.com/security/advisories?name=MDVSA-2011:053
www.php.net/ChangeLog-5.php
www.redhat.com/support/errata/RHSA-2011-1423.html
www.securityfocus.com/bid/46967
www.vupen.com/english/advisories/2011/0744