PHP 5.3.2 - 'zend_strtod()' Floating-Point Value Denial of Service

🗓️ 03 Jan 2011 00:00:00Reported by Rick ReganType

PHP 5.3.2 'zend_strtod()' Floating-Point Value Do

Reporter	Title	Published	Views	Family All 112
FreeBSD	php -- multiple vulnerabilities	6 Jan 201100:00	–	freebsd
Tenable Nessus	PHP 5.2.x < 5.2.17 / 5.3.x < 5.3.5 String To Double Conversion DoS	7 Jan 201100:00	–	nessus
Tenable Nessus	PHP 5.2 < 5.2.17 / 5.3 < 5.3.5 String To Double Conversion DoS	7 Jan 201100:00	–	nessus
Tenable Nessus	CentOS 5 : php53 (CESA-2011:0196)	15 Apr 201100:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : PHP vulnerability (SOL12650)	10 Oct 201400:00	–	nessus
Tenable Nessus	Fedora 13 : maniadrive-1.2-26.fc13.1 / maniadrive-data-1.2-5.fc13 / php-5.3.5-1.fc13 / etc (2011-0321)	24 Jan 201100:00	–	nessus
Tenable Nessus	Fedora 14 : maniadrive-1.2-26.fc14.1 / maniadrive-data-1.2-5.fc14 / php-5.3.5-1.fc14 / etc (2011-0329)	24 Jan 201100:00	–	nessus
Tenable Nessus	FreeBSD : php -- multiple vulnerabilities (2b6ed5c7-1a7f-11e0-b61d-000c29d1636d)	10 Jan 201100:00	–	nessus
Tenable Nessus	GLSA-201110-06 : PHP: Multiple vulnerabilities	12 Oct 201100:00	–	nessus
Tenable Nessus	HP System Management Homepage < 7.0 Multiple Vulnerabilities	20 Apr 201200:00	–	nessus

source: https://www.securityfocus.com/bid/45668/info

PHP is prone to a remote denial-of-service vulnerability.

Successful attacks will cause applications written in PHP to hang, creating a denial-of-service condition.

PHP 5.3.3 is vulnerable; other versions may also be affected.

<?php $d = 2.2250738585072011e-308; ?>

05 Nov 2014 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 25

EPSS0.15103