CVE-2006-0097

Stack-based buffer overflow in the createnamedpipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attackers to execute arbitrary code via a long 1 arghost or 2 argunixsocket argument, as demonstrated by a long named pipe variable in the host argument to the...

CVE-2006-0097

CVE-2006-0097 : A stack-based buffer overflow in the create_named_pipe function of libmysql.c affects PHP 4.3.10 and PHP 4.4.x on Windows. An attacker can cause arbitrary code execution by supplying a long host (arg_host) or long arg_unix_socket to mysql_connect, demonstrated by a long named pipe...