CVE-2010-4645

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

Design/Logic Flaw

strtod.c, as used in the zendstrtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service infinite loop via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU...

CVE-2010-4645

The CVE-2010-4645 entry concerns PHP’s strtod.c in the zend_strtod path, affecting PHP 5.2.x before 5.2.17 and 5.3.x before 5.3.5, and other products. The flaw arises from improper handling of a specific floating-point value in scientific notation (notably 2.2250738585072011e-308) in x87 FPU regi...