CVE-2007-4840

CVE-2007-4840 is referenced in connected advisories tied to PHP, citing that overly long arguments to iconv-related functions could crash PHP. The initial description describes context-dependent denial-of-service via long strings to iconv-based functions. The OpenVAS/Nessus entries also list CVE-...

CVE-2007-4840

PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service application crash via 1 a long string in the outcharset parameter to the iconv function; or a long string in the charset parameter to the 2 iconvmimedecodeheaders, 3 iconvmimedecode, or 4 iconvstrlen function...

PHP <= 5.2.4 multiple Iconv functions denial of service

Application: PHP =5.2.4 Web Site: http://php.net Platform: unix Bug: denial of service function: iconv,iconvstrlen,iconvmimedecode,iconvmimedecodeheaders special condition: default php-memory-limit ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4...